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IBM adopts an ‘open community development’ model 
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AIX so,it can get user feedback faster. PAGE 6 
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l ' execs such as H&R Block’s Marc West plan to 
hold off on rollouts of Windows Vista. PAGE 7 
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After Early St Surge, Adoption of ry 
For Retail Point-of-Sale Apps Slows 


Lower-cost version of Windows for POS gives Microsoft 
users less Treason to migrate to open-source tec 


BY ERIC LAI 

The holiday shopping season 
is bringing tidings both com- 
forting and not so comforting 


| ascaled-down version of Win- 

dows that is tailored for retail- 
ers and has a cut-rate price. 

But other analysts and some 


to Linux vendors that IT managers said 
are looking to break err. that Linux is hitting a 


into the Windows- 
dominated market for 


mem ly 
about Linux, visit 


natural plateau. After 
attracting some early 


point-of-sale terminals Matcciives adopters, it now has to 


used in retail stores. 
Linux’s share of the 
retail POS market is 
nearing 10%, according 
to Greg Buzek, president of 
IHL Consulting Group Inc. in 
Franklin, Tenn. But he said the 
rate of the open- source operat- 
ing system’s gains is slowing, 
largely because of Microsoft 
Corp.’s introduction in May of 


SGU win Over retailers that 
Ce is 


have invested heavily 
in Windows technolo- 


ing for their IT staffers. Those 
companies may need strong 
reasons to make a complicated 
and potentially expensive 
switch to a different system 
“T always love those tech- 
| nology conversations where 


Health Care Provider Nears 
End of 10-Year ERP Journey 


Starts to realize 
cost savings from 
$174M outlay 


BY HEATHER HAVENSTEIN 
One year from wrapping 
up a rocky 10-year effort to 
standardize on packaged ERP 
applications across its 40 
hospitals and medical centers, 
Catholic Healthcare 
West is finally seeing 
significant cost reduc- 
tions and streamlined 
business processes. 

The effort began in 
1996 with a failed at- 


tempt to standardize Pelee eC 


Sues that the project has al- 
me CRur Url oe 


on SAP AG’s software. 
After spending $120 mil- 


lion, the company turned to 

Lawson Software Inc. for its 

ERP applications in 2002. 
By next month the San 


| Francisco-based health care 


system, the country’s eighth 
largest, will have rolled out 
supply chain, finance and 
human resources applications 
from St. Paul, Minn.- 
Lawson to 31 of its facilities. 

The $54 million Law- 
son project, slated for 
completion by the end 
of next year, is replac- 
ing 200 internally de- 
veloped and packaged 
legacy systems. 

CHW officials said 


ek 
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everyone assumes you have 

a ‘green field’ environment,” 
said Robert Fort, IT director at 
Virgin Entertainment Group 
Inc., which operates 17 Virgin 


| Megastores in the U.S. 


Los Angeles-based Virgin 


| is upgrading about two-thirds 


Linux, page 16 


| Securing Card 


gy and Microsoft train- | 


Data Isn't 


An Easy Sell 


Retailers keeping 


| customer info, 


despite new rules 


BY JAIKUMAR VIJAYAN 
Recent data compromises, 


| such as one involving the 


Sam’s Club wholesale chain, 
highlight the challenges t 


| credit card companies f 


enforcing the security 
dards that went into effect last 
July for all businesses process- 
ing credit transactions. 

Sam’s Club, a division of 
Wal-Mart Stores Inc., said in 
a statement issued this month 
that it was investigating a se- 
curity breach that had exposed 


| credit card data belonging 
| to an unspecified number of 


customers who purchased gas 
at the company’s stations be- 
tween Sept. 2] and Oct. 2 
Beyond saying that its in- 
ternal systems and databases 
weren’t compromised, Sam’s 
Club didn’t elaborate on how 
Credit cards, page 16 
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Geek’s Garden 
In the Technology section: This week’s tour of the tech- 
nology landscape examines a 3-D, Web-based data- 
base for information about the brains of a commonly 
used strain of lab mice (left); robo-patients that give 
medical students a more realistic training experience; 
and the history of the computer mouse. Page 30 
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IBM speeds up the release of 
AIX test code in an effort to get 
feedback from users earlier. 


J.D. Edwards users want Oracle 

to include support for IBM 
servers and software in its up- 
coming Fusion applications. 


HP CEO Mark Hurd touts the cost 

benefits of automating IT. But 
users don’t expect their staffing 
needs to ease anytime soon. 


Microsoft shouldn’t expect many 

large users to upgrade right 
away when Windows Vista finally 
rolls out, according to a Forrester 
survey. 


1 Q&As: IBM, Hitachi Data execs 
explain their companies’ 
evolving storage strategies. 


1 Diebold’s e-voting machines are 

voted out of Florida’s Leon 
County, which will replace them 
with optical-scan devices. 


1 Global Dispatches: A Taiwanese 
national who is the chairman 
of a chip maker in China must pay 
a fine in Taiwan for investing in 

his company, a court rules. 


1 Continental Airlines’ Span- 
ish-language Web site is 

expanded with the help of transla- 

tion-management software. 


{ Linux vendor Mandriva aims to 

expand into corporate IT, but 
it may have a hard time catching 
up with Red Hat and Novell. 


8 Q&A: Share president Robert 
Rosen spells out what the IBM 
user group hopes to accomplish 
with its wish list for vendors. 


TECHNOLOGY — 


Come Together Carefully. As 

options and features multiply, 
selecting the right collaboration 
tools for your company’s needs is 
becoming an increasingly com- 
plex task. 


QuickStudy: Deep Web. The 

deep Web is home to a vast 
sea of information that can be ac- 
cessed via the World Wide Web 
but can’t be indexed by traditional 
search engines. Also known as 
the “invisible Web,” it’s estimated 
to be 500 times as large as the 


“surface Web.” 


Security Manager’s Journal: 

Rising to a Higher Standard 
isn’t Easy. In response to com- 
plaints that someone in-house 
might be snooping around in 
employees’ computers, security 
manager C.J. Kelly feels the need 
to implement two best practices: 
separation of duties and the prin- 
ciple of least privilege. 


MANAGEMENT 


yf) Hands On. Many oftoday’s s 

most successful IT pros say 
the only way to really know your 
company’s business is to experi- 
ence it. Read how various IT 
groups and individuals have got- 
ten themselves into the action. 


How to Write a Progress 

Report. They’re essential 
tools for tracking IT initiatives, 
but if the writers and readers 
aren’t in sync, progress reports 
can be hit-or-miss exercises for 
everyone involved. IT leaders on 
the receiving end talk about what 
makes for a great read. 
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In the Management section: Some CIOs say that 
the IT group that plays together stays together 
— and achieves better results along the way. 
Here’s how to inject some levity into your 
workplace for fun and profit. Page 44 





OPINIONS 


On the Mark: Mark Hall reports 

that something called PAN may 
be joining the collection of rhym- 
ing acronyms that includes LAN, 
WAN and SAN. Processor-area 
networks may become more com- 
mon as the use of blade servers 
increases — especially if utility 
computing takes off. 


? Don Tennant hears nothing 
more thar idle vendorspeak 
in a company’s claims to be a cus- 
tomer’s “partner.” He believes that 
to be a true partner, vendors need 
to have a stake in their customers’ 

success. 


? John D. Halamka thinks soft- 
ware has evolved to the point 
that it’s unusable. 


3 Curt A. Monash says that 
thanks to flash memory, it 
may soon be practical to have all 

of your data, plus most of your 
software, sitting conveniently in 
your pocket. 


46 Paul Glen advises that because 
baby boomers are beginning 
to retire, it’s time to start the hard 
work of developing new leaders. 


A Frankly Speaking: Frank Hayes 

goes inside Santa’s workshop 
to find out what the big names in 
the tech world will be getting for 
Christmas this year. 
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Gift List From ‘Security Claus’ 
SECURITY: Security expert Ira Winkler 
offers a list of gift ideas for the security- 
inclined — and those who could stand to 
pay a little more attention to security 
(and who couldn’t?). 


© www.computerworld.com/security 
When to Upgrade 


OPERATING SYSTEMS: Two Avanade consul- 
tants offer tips for taking the best advantage 
of Microsoft’s release cycle. 
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Linux Cluster Goes Mainstream 


STORAGE: When an IT manager needed to 
make data easier to access for his customers, 
he had no idea how much they would need, 
when they would need it or the size of the 
files they would create. His answer was to 
use a Linux storage cluster. 


@ QuickLink 27610 
Data Center Decisions 


WEBCAST: Online degree programs offered 
by the University of Phoenix have experi- 
enced incredible growth over the past 10 
years. Not surprisingly, back-end demands 
are enormous. University CIO Bob Carroll 
discusses data center expansion issues such 
as real estate costs and power supplies. 
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Web Se veen/SOA 


NEWSLETTERS: Sign up now to begin receiv- 
ing our new Web Services/SOA e-mail 
newsletter. Separate the hype from reality 
and find out what you really need to know 
in this weekly update, which will be deliv- 
ered to your e-mail in-box every Tuesday. 


@ www.computerworld.com/newsletters 
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Oracle Spree Boosts 
Sales, Cuts Profits 


Oracle Corp.’s string of acquisi- 
tions this year helped it grow its 
second-quarter revenue by 19%, 
but was also a factor in a slight 
decline in profit. 

ORACLE BY THE NUMBERS 


rs 8p 


Lawson’s Intentia 
Purchase Is Delayed 
Lawson Software inc. and Intentia 
International AB are extending 
the expected closing date of their 
union to April 30, three months 
after the original target. Lawson 
in June agreed to buy the Swed- 
ish firm for $480 million in stock. 
The companies didn’t explain 

the delay last week, but Lawson 
had earlier said that converting 
Intentia’s financial statements to 
meet U.S. accounting standards 
was taking longer than expected. 


Bell South to Cut 
1,500 Managers 


BellSouth Corp. late last week 
said it plans to cut 1,500 manage- 
ment workers, or about 2.4% 

of its overall workforce. Most of 
those leaving are expected to 
accept voluntary severance pack- 
ages. CEO Duane Ackerman said 
that BellSouth had worked hard 
to avoid the cuts, but many 
companies the size of BellSouth, 
including competitors, are already 
operating with less overhead and 
fewer management layers. 
Microsoft Buys 
Portfolio Manager 
Microsoft Corp. has agreed to 
acquire software and intellectual 
property from United Manage- 
ment Technologies Corp., a soft- 
ware and consulting firm in New 
York. Microsoft said it will com- 
bine UMT’s technology, including 
its Portfolio Manager software, 
with Microsoft Office Enterprise 
Project Management. Terms of 
the deal weren’t disclosed. When 
the acquisition closes, UMT em- 
ployees will join the Microsoft 
Office Project unit. 
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IBM Moves to Speed Up 
Release of AIX Test Code 


Seeks early user feedback on its Unix 
plans to help counter server rivals 





BY PATRICK THIBODEAU 
BM IS changing how it 
develops and releases 
AIX, saying that it wants 
to give users and software 
vendors a bigger role in influ- 
encing the development of the 
Unix operating system. 

As part of the effort, AIX us- 
ers will have access to new op- 
erating system features as early 
as a year in advance of a version 
upgrade. Until now, they typi- 
cally have seen a beta release 
three or four months in ad- 
vance of the commercial ship- 
ment. But IBM last week said 
that it intends to make some of 
the new features planned for 
AIX 5.4, which is due in 2007, 
available for testing beginning 
in next year’s first quarter. 

“Instead of a big-bang re- 
lease, what we’re trying to do 
is give customers access to the 
code early,” said Karl Freund, 
vice president of IBM’s pSeries 
server line. The goal is to not 
only get new features into 
the hands of independent 
software vendors and users 
more quickly, but to also get 
early feedback on some of the 
concepts that the company is 
considering adding to the op- 
erating systems, Freund said. 


‘Open Community’ 

IBM is calling its approach an 
“open community development 
model,” and it’s establishing 
an AIX Collaboration Center 
in Austin as the focal point for 
the effort. The company said 

it plans to spend $200 million 
on hardware and development 
support for the center over the 
next two years. 

What IBM is proposing 
“makes a lot of sense. .. if it 
works,” said AIX user Kenneth 
Ebbe, assistant to the CIO at 
the University of Wisconsin 
at Madison. “What they set 
out to do with it and what they 
actually do with it can be two 





different things,” said Ebbe, 
who is a former president of 
the Share user group for IBM 
shops. “But it sounds like they 
are trying to get the end users 
involved as quickly as possible 
and as broadly as possible.” 
Dan Olds, an analyst at Ga- 
briel Consulting Group Inc. in 
Beaverton, Ore., said IBM’s 
collaboration on AIX may 
benefit independent software 
vendors in particular. The 





quicker a developer can under- 
stand how the operating sys- 
tem handles functions such as 
virtualization, “the better the 
ISV’s applications are going to 
be,” Olds said. 

Freund said the initial set 
of AIX 5.4 features due for 
early testing next quarter will 
include some of the workload 
management technology that 
IBM gained through its June 
acquisition of Meiosys Inc. 

IBM isn’t following the lead 
of Sun Microsystems Inc. and 
making AIX open-source, as 
Sun did earlier this year with 


www.computerworld.com 


its Solaris operating system. 
Freund ruled out open-source 
as an option and said he thinks 
open-source products tend 

to mimic advances made in 
proprietary ones. For instance, 
he said IBM worked to include 
AIX’s dynamic logical parti- 
tioning technology in Novell 
Inc.’s SUSE Linux Enterprise 
Server 9 software. 

But there’s a pressing busi- 
ness reason for making the 
move to a more community- 
oriented development model, 
Freund said. Unix servers 
are under such pressure from 
commodity Windows and 
Linux systems, he said, that 
vendors such as IBM have to 
accelerate access to their tech- 
nical innovations “in order for 
us to continue to drive suc- 
cessful growth.” » 





Users Demand That Oracle 
Fusion Include IBM Support 


Suite promises to 
combine acquired 
technologies 


BY MARC. L. SONGINI 

As Oracle Corp. builds its 
Fusion best-of-breed applica- 
tion suite, it should make sure 
that rival IBM’s hardware and 
software are an integral part 
of the road map, according to a 
survey of former J.D. Edwards 
& Co. customers. 

Oracle has been crafting its 
Fusion suite from pieces of its 
applications and the People- 
Soft and J.D. Edwards software 
it acquired early this year. Or- 
acle is also expected to incor- 
porate technology gained from 
other acquisitions — including 
Retek Inc. and Siebel Systems 
Inc. — in Fusion, which is slat- 
ed to be completed in 2007. 

The recent survey of almost 
300 members of the Quest 
International Users Group 
found that almost 80% of them 
consider support for the IBM 
iSeries server, formerly known 
as the AS/400 line, to be vital 
for Fusion. 

Quest, originally formed by 
users of J.D. Edwards software, 
announced the results of the 





Quest Survey 
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survey last week. 

Keeping the iSeries as a 
platform of choice for Fusion 
was more important to most 
respondents than pricing or 
functionality, Quest officials 
said. Many users of the former 
J.D. Edwards World and Enter- 
priseOne software rely on the 
iSeries hardware and want the 
option of keeping it, said Quest 
President John Matelski. 


Infrastructure Freedom 
Matelski, deputy CIO of the 
city of Orlando, said the sur- 
vey data indicated that “most 
customers do not want to be 
forced to a new infrastructure 
and will consider other op- 
tions if forced to.” The city of 
Orlando runs EnterpriseOne 
financials on the iSeries. 

Fred Pond, a past Quest 
president, also wants to see 
IBM support maintained. 


If Fusion is to be the best of 
PeopleSoft, J.D. Edwards and 
Oracle software, then Oracle 
has to provide multiple infra- 
structure choices, he said. 

However, Pond, director 
of information services at 
Schnitzer Steel Industries Inc. 
in Portland, Ore., said that as 
the development of Fusion 
continues, some users fear that 
instead of a compilation of 


; multiple technologies, it will 





look “more like an upgrade of 
the [Oracle] E-Business suite.” 
Schnitzer uses EnterpriseOne. 

“We would like to see [Fu- 
sion] operate on the iSeries 
platform and with the DB2 da- 
tabase,” said Bubba Tyler, CIO 
at Conshohocken, Pa.-based 
Quaker Chemical Corp., an 
EnterpriseOne shop. 

“Otherwise, we will have 
to reinvest in infrastructure, 
training and support, and this 
added expense would bring no 
additional value to us,” he said. 

If support for the IBM server 
line is dropped, 29% of those 
surveyed said they wouldn’t 
migrate to Fusion, while 50% 
said they weren't sure if they 
would upgrade under those 
conditions. 

Support of IBM software is 
also critical, since 85% of re- 
spondents use IBM’s DB2 data- 
base and 67% use it exclusively. 

Oracle declined to comment 
on the survey. ? 
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Hurd Eyes IT Automation as Boon for Users - and HP 


Says data center costs can be cut; users 
doubt staffing needs will drop soon 





BY PATRICK THIBODEAU 

NEW YORK 

In Hewlett-Packard Co.’s brave 
new IT world, some data 
centers will be run without 
people. And in the ones where 


IT technicians are still needed, | 


workers will be able to man- 
age ten times the number of 
servers they do now, thanks to 
increased automation. 

That’s the vision sketched 
out by HP CEO Mark Hurd at 
a meeting with securities ana- 
lysts here last week. Hurd pre- 
dicted that automation — not 

“labor arbitrage,” or cutting 
labor costs through offshoring 
and other means — is going 
to become the leading IT cost- 
saving tool in the years ahead. 

But HP faces some big hur- 
dles in its effort to convince IT 
managers that Hurd’s automa- 
tion plan will actually lead to 
major benefits for users. 

First, HP has to clean up its 
own IT operations, which it 
wants to use as a showcase to 
convince users that automa- 
tion can make a difference. 

The company plans to 
spend $2.8 billion on capital 
improvements during its cur- 
rent fiscal year, much of it 
on IT projects, including the 
consolidation of more than 
85 data centers into just six 
facilities. That represents a 
40% increase over HP’s capital 
budget for the year that ended 
Oct. 31, when it spent just shy 
of $2 billion. 

Second, HP is going to have 
to demonstrate that a ratio of 
one technician for every 200 
servers is possible through the 
use of virtualization and auto- 
mation technologies. The typi- 
cal ratio now is about 1-to-20, 
said Ann Livermore, executive 
vice president of HP’s Tech- 
nology Solutions Group. 


Eye on Support Ratios 
Dave Dully, chief technology 
officer at Baptist Health Sys- 
tem Inc. in Jacksonville, Fla., 
has 225 servers running Win- 
dows and NetWare, and seven 


technicians — or about one for 
| every 36 machines. That’s a 
relatively high ratio, helped by 
Baptist Health’s standardized 
IT environment. But getting 
| to aratio of 1-to-200 “is not 
anything I can envision at this 
point,” because of the unique- 
ness of individual servers, 
Dully said. 

Enterprise management 
tools such as application pro- 
visioning and rapid deploy- 
ment software should help im- 
| prove the current ratio, Dully 
said. But he added that using 
virtualization technology to 
increase server utilization, 
| which the health care provider 
is exploring, may lower the 


IT execs say they 
don’t plan to start 
upgrades in 2006 


BY ERIC LAI 
| Microsoft Corp. may get a feel- 
ing of déja vu next year as it 
| tries to persuade businesses to 
upgrade to its Windows Vista 
client operating system. 

Corporate users were gener- 
ally slow to deploy Windows 
XP, the desktop predecessor 
| to Vista. Microsoft released 
XP in October 2001. But 
of 77 large companies 
| surveyed by Forrester 
Research Inc. in July 
2004, nearly half were 
still running Windows 
2000 or other older ver- 
sions on the majority of 
their PCs. 

A similar survey of 
56 users last July found 
that about 75% were 
running Windows XP 
on half or more of their 
PCs, Forrester said in a report 
this month. 

Warning of “upgrade apa- 
thy,” the firm said that only 
one-third of this year’s respon- 
dents plan to start deploying 
Windows Vista when it be- 





support ratios because it in- | 
creases system complexity. 
~ | 

Larry Buettner, CIO at | 


| Wheels Inc., a Des Plaines, IIl.- | 


based transportation fleet leas- | 
ing firm, has four technicians 
managing 120 servers and 
doesn’t see that ratio changing 
for the next five years. 

Buettner said he does expect | 
the systems administration 
parts of a technician’s job 
to decrease. But he thinks 
there will be an increase in 
the amount of work related 
to administering third-party 
software and networks. Tools 
for automating those tasks are 
still in the early development 
stages, according to Buettner. 

After listening to Hurd’s 
speech, Gartner Inc. analyst 


| Carl Claunch said the push for 


| 
| 
| 
| 


more automation is an indus- 


trywide phenomenon. But, he 
said, it will take three to four 
years for most data centers to 
begin to realize higher server 
management ratios, because 
they are “burdened with lots 
of legacy.” 

Rich Ptak, an analyst at Ptak, 
Noel & Associates in Amherst, 
N.H., said HP’s long-term be- 
lief that one data center tech- 
nician will be able to manage 
200 servers is realistic. 

“IT is on the cusp of apply- 
ing all the power of IT that 
was directed outside its opera- | 
tions to its internal operations,” | 
Ptak said. He added, though, 
that HP will have to extend its | 
OpenView line of management | 
tools and develop software 
for managing dynamic IT en- 
vironments in order to make 
such automation feasible. > 


HP’s Plan to 
Simplify it’s IT 
A SINGLE VIEW OF DATA: 
HP will consolidate 762 data 
marts worldwide into one en- 
terprise data warehouse. CEO 
Mark Hurd said the data marts 


are too expensive to architect 
and maintain. 


DATA CENTER CONSOLI- 
DATION: The company, which 
currently has more than 85 
data centers in 29 countries, is 
working to reduce the number 
of IT facilities to six globally. 


PROJECT TIMELINES: 

HP will spend heavily on the 
IT overhaul during its current 
fiscal year. “Sometime in the 
middle of 2006, we'll begin to 
be better at all this,” Hurd said. 


Reporter Matt Hamblen 
contributed to this story. 





comes available in late 2006 or 
even when Microsoft releases 
its Service Pack 1 update. 


That’s down from about 43% 


| in the 2004 survey. In addition, 
| 20% of the users surveyed this 


| grade to Vista at ail. 


“For the first time in recent 


| years, [many] firms now have a 
| single version of the Windows 


| 
| year said they don’t plan to up- | 
| 
| 
| 
| 


operating system to support,” 


| Forrester analyst Simon Yates 


| wrote in the report. “The pros- 
| pect of beginning another mi- 
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gration next year isn’t 
appealing to them.” 
Marc West, CIO at 
H&R Block Inc., last 
week said he doesn’t 
plan to upgrade to Win- 
dows Vista until 2009 at 
the earliest. The Kansas 
City, Mo.-based tax pre- 
parer has 120,000 PCs 
running either Win- 
dows 2000 or Windows 
XP. The systems mostly 
run custom applications 
that wouldn't leverage the new 
features in Vista, West said. 
“Some of the improved secu- 
rity features are of interest, but 
not enough to do a forced up- 
grade,” West said, adding that 
he’s evaluating whether to keep 
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paying for Software Assurance, 
Microsoft’s maintenance pro- 
gram that gives users access to 
product upgrades. 

Patrick Moroney, CIO at 
Health Care Service Corp. in 
Chicago, said he doesn’t have 
any Vista upgrade plans built 
into his 2006 budget. Moroney 
oversees 15,000 PCs running 
Windows XP at his company, 
which operates Biue Cross and 
Blue Shield health maintenance 
organizations in Illinois, Texas 
and New Mexico. Health Care 
Service has a Microsoft enter- 
prise license that includes Soft- 
ware Assurance. But, Moroney 
said, “given our normal lag on 
introducing new enterprise- 
wide technology, the upgrade is 
more likely a 2008 effort.” 


Waiting for SP1 

Likewise, FHLBank Topeka, a 
Kansas-based federal home 
loan bank, doesn’t plan to start 
upgrading its PCs next year, 
said IT director Steven Naylor. 


“We typically wait until Micro- 


soft releases Service Pack 1 of 
an operating system before we 
feel the software has been tried 
and tested enough,” said Naylor. 
In addition, some corporate 
users want to stick with Win- 


For Many Windows Users, Vista Plans Aren’t a Priority : 


| dows XP and the PCs running it 
| for financial reasons. 

“We're really trying to maxi- 
mize our [hardware] invest- 
ment,” said Michael Koval, CIO 

| at Long & Foster Real Estate 

| Inc. The Fairfax, Va.-based real 

| estate firm has about 6,750 PCs 

| that are between one and four 

| years old, and all of them are 
running Windows XP Profes- 

| sional. “My expectations are 

| that I can get a minimum of six 

| years, maybe more,” out of the 

| PCs, Koval said. 

Koval doesn’t expect to be- 

| gin refreshing his hardware 

; until 2007, at which time he 

| will also start looking to up- 

| grade some users to Windows 

| Vista. He doesn’t want to be a 

| laggard on upgrading, though. 

“While it won’t be Day One, I do 

| plan to migrate quickly,” he said. 

| “Last time, we did wait almost 
two years after XP was released. 
This time will be different.” 

Both Forrester and Gartner 

| Inc. are advising IT managers 

| that even if they don’t plan to 

| deploy Vista next year, they 
should begin evaluating and 
testing it because of the length 
of time — 12 to 18 months 

— that’s generally needed to 

prepare for a rollout.» 
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Microsoft Fixes Flaw 
In Internet Explorer 


Microsoft Corp. last week said it 
fixed a widely reported flaw in its 
internet Explorer browser. The 
flaw had been used by attackers 
over the past few weeks to take 
over the PCs of unsuspecting us- 
ers. The flaw was one of four IE 
bugs fixed in Microsoft's regular 
monthly software update. Secu- 
rity experts had known about the 
flaw since May. 


EarthLink Buys VPN 
Services Company 
EarthLink Inc. last week agreed 
to acquire New Edge Network 
Inc. for $144 million in an effort 
to add to its virtual private net- 
working customers among small 
and midsize businesses. Earth- 
Link projects that the deal will 
bring in $120 million in annual 
revenue. New Edge, which offers 
VPN services to businesses, will 
become a subsidiary of Earth- 
Link and will retain its name. 
EarthLink will keep on all of New 
Edge’s 345 employees. 


Network General 
Names Gibson CEG 


Network General Corp. has 
named Bill Gibson as its CEO. 
The CEO post at the maker of 
network and application perfor- 
mance analysis products had 
been vacant since October 2004, 
when CEO Bruce Framm left. 

In the interim, Mike Pope ran 

the company as president - a 
position he will continue to hold. 
Gibson had been chief operating 
officer at Crystal Decisions Inc., 
now part of Business Objects SA. 


Microsoft Unveils 
Web-based IM 

Microsoft has brought out a Web- 
based version of its corporate 
instant messaging software. The 
release provides access from 
remote or non-Windows comput- 
ers. The new version, called Of- 
fice Communicator Web Access, 
was introduced at last week’s In- 
terop New York trade show dur- 
ing a keynote by Gurdeep Singh 
Pall, corporate vice president of 
the Live Communications Team. 


E ON THE MARK 


dng tinea cats of 


You GoT The 


NEWS 


AN RuNNINGY 


So Well, Now THe Boss 
WANTS YoU To Do tHe 
WHOLE. CAFETERIA’. 


Veatue heard of 


wey? — 


LANs, WANs... 


... and SANs. Now add PANs to your vocabulary of 
“(blank]-area network” acronyms. Processor-area net- 
works, or PANs, may catch on as the hot buzzphrase of 
2006 if the utility computing market starts to heat up. 
That’s the hope of Susan Davis, vice president of mar- 


keting and 
product man- 
agement at 
Egenera Inc. 

in Marlboro, 
Mass. Her 
company 

sells a rack of 
server blades 
called Blade- 
Frame, which 
isn’t very different from what 
many other commodity blade 
makers do. But Egenera adds 
PAN Manager, a tool that cre- 
ates “an identity of a server 
entirely in software,” Davis 
says. She claims that PAN 
Manager lets you define an 
application’s underlying op- 
erating system, network con- 
nections, memory needs and 
other hardware dependencies 
and then just walk away. PAN 
Manager determines which 
blade or blades the app will 
run on, provisions the devices 
appropriately, then boots up 
the app. A BladeFrame system 
links the I/O of the blades in- 
stalled in it via a proprietary 
10Gbit/sec. fabric. Naturally, 
all data is offloaded to a stor- 
age-area network. Today, you 
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can have 24 blades in a rack. 
In the first half of next year, 
Davis says, Egenera will add 
the ability to link multiple 
BladeFrames. BladeFrames 
start at $89,900. 


Bring your remote 
workers into... 


... Meetings, securely. By 
month’s end, Seattle-based 
Aventail Corp. plans to re- 
lease its Secure Collaboration 
appliance. According to Sarah 
Daniels, Aventail’s vice presi- 
dent of product management 
and marketing, the appliance 
lets end users set up ad hoc 
but secure Web conferences, 
share videos and exchange 
instant messages. Meanwhile 
help desk workers can use it 
to access and take control of 
remote devices for trouble- 
shooting and repair. Daniels 
says the appliance integrates 
with voice-over-IP software 
on PCs, enabling VoIP tech- 
nology to be used in a secure, 


= ees" 
Aventail’s device helps to secure col- 
laboration among remote workers. 








collaborative environment. 
The appliance, which starts at 
$4,995, can handle up to 500 
concurrent users. 


Spitzer spurs interest 


in software for... 

. .. Managing financial-industry 
assets. According to John Bos- 
ley, there are two software 
eras for developers of tools 
that help financial services 
firms manage the assets: the 
pre-Eliot Spitzer days, and 
the years since 1999, when 
the New York state attorney 
general began slapping fines 
on Wall Street 
firms for fraud- 
ulent practices. 
Bosley, who is 
chief operat- 
ing officer at 
Bonaire Soft- 
ware Solutions 
LLC in Boston, 
says that in the 
Spitzer era, de- 
mand has been 
skyrocketing for his compa- 
ny’s RevPort software, which 
documents the fees a broker- 
age can charge for, say, man- 
aging mutual funds. (Spitzer 
has nailed firms for over- 
charging their customers.) 
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“We got very lucky because he 


brought a lot of attention to 
our business,” Bosley says. He 
claims that RevPort helps us- 
ers “make sure the back office 
is squeaky clean.” To that end, 
Bonaire later this month will 
release a module that spits out 
standard reports for Sarbanes- 
Oxley Act compliance audits. 
Pricing wasn’t available. 


Catch misbehavior by 
insiders in your... 

... Web apps in real time. You 
probably only have angels 
working in your company. 
But if you think there’s a little 
devil or two lurking about, 
consider a security appliance 
from Covelight Systems Inc. 
in Cary, N.C. According to 
Bruce Pharr, the company’s 
director of marketing, the 
Covelight Percept system 
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HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY BUZZ BY MARK HALL 


Covelight’s appliance detects and 
warns of end-user misdeeds online. 
looks for end-user behavior 
that could lead to identity or 
account fraud. The software 
in Covelight’s appliance builds 
profiles of the online activities 
of up to 250 users and com- 
pares them against past be- 
havior and against the actions 
of the end-user population 

as a whole. If something’s 


| amiss, the software warns the 


appropriate folks, indicating 
the possible transgression. 
Pharr says that by next June, 
Covelight will increase its on- 
board data storage capacity 
to ITB, up from 250GB now. 
Pricing starts at $49,950. 


Syndicate enterprise 


data for more . . . 

... browsers via an RSS tool. 
Later this month, KnowNow 
Inc. in Sunnyvale, Calif., will 
add support for the Firefox 
and Safari Web browsers to 
the eLerts feature in its En- 
terprise Simple Syndication 
(ESS) service. Internet Ex- 
plorer users already can get 
eLerts. When end users sub- 
scribe to be notified, ESS an- 
nounces changes to the data 
in their favored applications 
on the browser’s tool bar. Ron 
Rasmussen, KnowNow’s chief 
technology officer, says eLerts 
can also be 
used to send 
information 
such as up- 
dates to ben- 
efits plans to 
all browsers 
inside a com- 
pany. In the 
new version 
of the service, 
the eLerts can be received in 
the Windows Deskbar as well. 
The service comes with a 
feature called Channel Guide, 
which lets users see which 

of the applications they have 
access to can leverage the 
eLerts feature. Pricing starts 
at $1,500 per month. » 


eLert supports 
Te ee Lee 





Innovations by InterSystems 
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Business Process Orchestration, plus.. Business Activity Monitoring 


Integrate Your Enterprise. 
Tackle Any Type of Integration With Ensemble. 


Ensemble’s innovations will enable you to successfully integrate your enterprise faster. Much faster. 

This is the first platform to offer a seamless ensemble of integration and development technologies 
for every type of integration project. Ensemble’s universal integration platform is the innovative 
fusion of an integration server, data server, application server, and portal development software. 
With its single development and management environment, Ensemble will dramatically reduce your 
time-to-solution. 

We back these claims with this money-back guarantee: For up to one year after you purchase 
Ensemble, if you are unhappy for any reason, we'll refund 100% of your license fee.* We are InterSystems, 


a global software company with a track record of innovation for more than 25 years. 


InterSystems 


ENSEMBLE 


Request a FREE proof-of-concept project at www.InterSystems.com/Ensemble16A 


© 2005 InterSystems Corporation 
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Vendor Execs Take Stock of Evolving Storage Strategies 


Roberson hopes to sign channel partners, add 


IBM’s Monshaw talks about acquisition plans, 


virtualization and the threat from Microsoft 





BY LUCAS MEARIAN 

Andrew Monshaw, general manager of 
IBM’s Storage Systems and Technology 
Group, discussed the company’s stor- 
age plans, the state of virtualization 
technology, the future of tape storage, 
and Microsoft Corp.’s ven- 

ture into the storage business 

in an interview with Com- 

puterworld last week. 


What's changed from when 

you began this job a year ago? 

Our vision on information 

on demand is resonating. 

The strategy is working 

and [is being] validated by 
customers. [Also], virtualization is 
real this year. We're adding four to 
five customers a day on our storage 
virtualization offering, [SAN Vol- 
ume Controller]. Five years ago, we 
thought people would sell virtualiza- 
tion. What’s turned out is you sell the 
benefits of virtualization. It’s a subtle 
difference, but from a business model 
[point of view], it’s a big difference. 


How many SAN Volume Controller cus- 
tomers are there today? We have about 
1,600 customers. 


How is the virtualization technology being 
used? Almost every customer uses it 
for [data] migration and uses it for uti- 
lization improvements. Interestingly, 
a high percentage of customers don’t 
even know how much storage they 
have in their enterprise. Let’s just 
start there. So a lot of this is geared 
around getting control of their infra- 
structure and then utilizing it. 

This year has been the year of vali- 
dation. NetApp renamed everything 
“V-Series.” EMC came out and said, 
“We were just kidding, virtualization 
is important, and we’re going to try to 
get this Invista thing out the door.” So 
it’s been validated by our competitors. 


Are midrange systems cannibalizing your 
high-end systems sales? I don’t see 
cannibalization. I see demand for 
both areas. Another way to think 
about that is, could robust, clustered 
midrange systems be a movement in 
the future? Very possibly. But there 
will be requirements for large main- 
frame systems and requirements 





for midrange systems. 


Are disk storage systems eating into tape 
system sales? We've probably had our 


best tape [sales] year in years. Innova- 
tions will continue to drive tape going 


forward. The key is cus- 
tomers have to save a lot 
of this data. There’s a lot 
of compliance regulations 


driving this. There are tons 


and tons of images. 


Are you considering reselling 
Decru’s DataFort encryption 
appliance technology through 
your reseller partnership with 
Network Appliance? We are evaluat- 
ing this all the time. Our partnership 
with NetApp is off to a great start. 
We're having ongoing discussions 
about how to leverage each other’s 


| technology all the time. 


How has Microsoft’s expansion into stor- 
age affected your plans? We're keep- 
ing an eye on this space. It’s 
clearly a vendor we need to 
continue to partner with. It’s 

clear they’re more active in the 
storage community, but it’s not really 
clear where they’re going yet. We’re 
certainly not dismissing them. When 
Microsoft puts their mind to some- 
thing, they get it done. 


What role do acquisitions play in IBM’s 
2006 storage product road map? We did 
the NetApp agreement and the Aperi 
thing. Now it’s time to get into the 
OEM aliiance and acquisition space. 


Would NetApp be a potential purchase for 
you? I’m not going to comment on that. 


What is the state of the Aperi open-source 


storage management platform effort? 
There’s a lot of interest. A bunch of us 
get it, and a few people don’t get it. I 
think enough pressure in the system 
will force them to look at it from the 
customer’s point of view. 


When do you expect to see some product 
from this? By the middle of next year, 
we should be making some good prog- 


ress. The board will define the code by 


the middle of next year that’s been do- 
nated. Then we'll be off to the races. » 


Q&A 


low-end offerings and improve NAS business 


BY LUCAS MEARIAN 

Despite taking some storage market 
share from EMC Corp. this past 
quarter, Hitachi Data Systems Inc. 
still trails several rivals, according 
to market research firm IDC. Dave 
Roberson, president and 

chief operating officer at 

HDS, spoke with Comput- 
erworld last week about 

the company’s plans to a 
improve its standing in the } 
industry. 


Why aren’t you grabbing 

more market share? Well, 

let’s look at where the 

market share is being gained. We’re 
gaining a lot in what’s traditionally 
been called the enterprise, which 
has three main players: IBM, EMC 
and us. 

Our enterprise share is in the 
40% range, depending on what set 
of figures you look at. The small-to- 
medium-business market [share] 
...is more in the high single 
digits. So we’re investing in 
building our channel capa- 
bilities, and we’re investing 
in our new products and looking at 
a lot of things to gain share in that 
market. 


How do you expect to boost your share 
of the midmarket? I don’t think this 
is a technology driver. This is more 
of a go-to-market issue. I think we 
have the technology. 

Part of it is price points — the 
ability to be aggressive with a price 
point. In this market, it’s typically 
about half the price of the enter- 
prise, give or take. 

The other key driver in this mar- 
ket is people are a lot of times not 
looking for a storage-only buy. 


When do you expect to sign up partners 
to improve your channels? You'll see 
something from us in the next six 
months, but don’t necessarily ex- 
pect to see another server partner. 


Do you expect to have pure reseller 
partnerships? That would be the 
obvious other choice. We’re really 
looking at who we can partner with 
who’s not aligned or who is neutral 








enough, because we really need to 
be in the first position with some- 
one — but someone who’s large 
enough to make a difference. 


How many operations are using HDS’s 
TagmaStore array and its 
virtualization technology to 
pool heterogeneous storage, 
rather than just using the 
internal disk on the array? 
A quarter to a third of 
them. We've sold 1,700 
systems, so that’s a mate- 
rial number. 

One of the things we’re 

finding [that] people are 
using virtualization for a lot is data 
migration. Where it’s more difficult 
to migrate other people’s technolo- 
gies, they'll use our engine for data 
migration — even on other people’s 

[arrays]. But we do have people run- 

ning in production with IBM, EMC 

and others that batch to the [Tagma- 

Store] controller. 


Do you have plans for any low-end prod- 
ucts designed for branch offices in the 
next three to six months? That’s an 
area that goes back to our channel 
discussion, where we need to have a 
good, viable, low-cost product to go 
into that market. And I think you'll 
see something from us in that six- 
month time frame. 


Do you need to become more aggres- 
sive in your pricing? I think we need 
to be more aggressive in these 
low-end products, because price is 
a big driver there. We'll continue to 
be competitive, as we need to be in 
the enterprise, and certainly price 
is always an issue. But I don’t think 
we'll get any more or less aggressive 
than we have been in the past when 
it comes to our traditional business. 


What are your plans to improve your 
network-attached storage business? 
That’s another area we’ve not ex- 
ecuted well. There are a number of 
things we’re working on. 

In your six-month time frame, I 
think you'll see more from us in that 
arena as well. We need to have a 
stronger internal capability in that 
space. We may partner. » 











_THE INVASION 


_DAY 4: My data has a life of its own. I can’t 
control it. I can’t manage it. I can’t... get out. 


_DAY 5: I called for help. I tapped out a distress 
signal with an allen wrench. Do the guys upstairs 
know Morse code? 
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Visto Files Lawsuit 
Against Microsoft 
Visto Corp. has filed a lawsuit 
accusing Microsoft Corp. of 
improper use of its patented 
technologies. Visto alleged that 
Microsoft illegally uses the tech- 
nology in software for accessing 
e-mail from phones and other 
wireless devices. Visto’s suit, 
filed in the U.S. District Court in 
Texas, seeks unspecified mon- 
etary damages and a permanent 
injunction preventing Microsoft 
from shipping the software in 
question, Windows Mobile 5.0. 


Google to Add 600 
Workers in Dublin 


Google Inc. will hire 600 people 
over the next two to three years 
at its European headquarters in 
Dublin. The new workers will fill 
positions in Google’s operations, 
sales, engineering, legal, finance 
and human resources depart- 
ments. A spokeswoman wouldn’t 
reveal the total Dublin workforce, 
but she said the company em- 
ploys 800 people in Europe. 


NTT DoCoMo Buys 
Stake in Korean Firm 


NTT DoCoMo Inc., Japan’s larg- 
est cellular carrier, has agreed to 
pay $563 million for a 10% stake 
in KTF Co., South Korea’s sec- 
ond-largest cellular carrier. The 
two hope to use the arrangement 
to develop services that can be 
offered to Wideband Code Divi- 
sion Multiple Access customers. 
The firms also expect to cut costs 
from joint standardization of 
equipment and exchanging tech- 
nical and marketing expertise. 


Adobe Plans Monthly 
Patch Schedule 


Adobe Systems Inc. plans to 
begin releasing security patches 
on a regular, monthly basis 
starting sometime within the 
next six months. The monthly 
security updates are expected to 
cover most of Adobe’s products, 
officials said. The company cur- 
rently releases security patches 
on an ad hoc basis, but custom- 
ers have asked for a more pre- 
dictable schedule. 
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Diebold Machines Voted 
Out by Florida County 


Election officials fear touch-screen 
system lacks accuracy, accessibility 





BY MARC L. SONGINI 
LORIDA’S LEON County 
last week decided to 
scrap its investment in 
160 Diebold Election 
Systems AccuVote optical- 
scan voting machines, citing 
handicapped access and accu- 
racy issues. 

The Leon County Com- 
mission voted unanimously 
to approve a request by elec- 
tions supervisor Ion Sancho 
to swap in new optical-scan 
devices from Omaha-based 
Election Systems & Software 
Inc. (ES&S). 

Sancho said the $1.2 mil- 
lion cost of changing systems 
is well justified. “To prove to 
voters that their votes are all 
counted as they intended them 
to be counted, yes, it’s worth 
it,” he said. 

Sancho said the primary 
reason for ditching the 
Diebold machines is his lack 
of confidence in the accuracy 
of their touch-screen systems, 
which would have to be in- 
stalled to ensure access for 
users with disabilities. 

The county would need 
the Diebold touch-screen 
systems to comply with the 
federal Help America Vote 
Act and Florida state election 
laws. The HAVA statutes dic- 
tate that every precinct have 
a touch-screen or specially 
equipped optical-scan device 
that allows blind voters and 
other disabled people to cast 
their ballots unaided. 

ES&S offers specialized 
optical-scan systems that are 
handicapped accessible. 

The Diebold touch-screen 
e-voting systems have been 
certified by Florida state elec- 
tions officials, but Sancho de- 
cided not to use them because 
of their lack of a paper trail. 
The county replaced Diebold’s 
optical-scan machines as well 
so it could deal with a single 


| if software is trustworthy, 





vendor, ES&S, officials said 

A spokesman for McKinney, 
Texas-based Diebold down- 
played the county’s decision. 

“J think Mr. Sancho, for what- 
ever reason, wanted to switch 
vendors,” he said. 

Meanwhile, Volusia County, 
Fla., has also decided against 
using touch-screen systems, 
and Miami-Dade County 
is considering scrapping a 
$25 million investment in 
ES&S touch screens. Both cit- 
ed accuracy concerns because 
the technology doesn’t gener- 
ate paper receipts that allow 
voters to verify their votes. 


Compliance Effort 

To meet the regulations, San- 
cho plans to use a hybrid opti- 
cal-scan reader called Auto- 
Mark, which is jointly offered 





by ES&S and its partner, Auto- 
Mark Technical Systems LLC 
in Lombard, IIl., AutoMark has 
an audio component that en- 
ables the blind to vote. Sancho 
said the vendor is working to 
gain state certification for the 
system. 

In what Sancho called an 
unrelated action, a Leon County- 
sponsored hack attack on the 
Diebold AccuVote optical-scan 
systems demonstrated vul- 
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nerabilities in the memory 
card. That hacking event was 
sponsored in part by Black 
Box Voting Inc., which bills 
itself as a consumer protection 
group for elections. 

Black Box Voting has been 
critical of the security of some 
e-voting systems, especially 
those that don’t provide a pa- 
per trail of votes cast and those 
that can be tampered with in 
a way that could change the 
outcome of elections. 

The Diebold spokesman dis- 
missed those concerns, saying 
that the company hasn’t been 
able to participate directly in 
the hacking attempts, which 
therefore invalidates them. ? 


Leon County believes its $1.2 million e-voting switch is a justifiable expense. 





OMG Pushes Standards for Security on Gov't Software 


BY JAIKUMAR VIJAYAN 

A report released this month 
by a task force within the 
Object Management Group 
outlines a proposed set of 
standards for verifying the 
security and integrity of soft- 
ware that’s being acquired by 
government agencies. 

The proposal by the task 
force, which includes repre- 
sentatives from the private 
sector and government agen- 
cies, is part of a broader ef- 
fort to ensure that software 
products used by the govern- 
ment meet consistent and pre- 
defined security standards. 

The OMG hopes to develop 

“a formal way of measuring 
said Djenana Campara, who 
co-chairs the Needham, Mass.- 
based consortium’s Architec- 
ture-Driven Modernization 
Task Force. 

The Software Assurance 
Framework standards would 





give vendors and software 
buyers a consistent way to 
evaluate the design robustness, 
reliability, process integrity 
and configuration controls of 

a system, said Campara, who 

is also chief technology officer 
at Klocwork Inc., a Burlington, 
Mass.-based vendor of vulner- 
ability analysis software. 


Security Imperative 

Such a framework is crucial 
for allowing software suppli- 
ers to submit claims about the 
integrity of their software and 
enabling purchasers to verify 
the claims, said Joe Jarzombek, 
director of software assur- 
ance at the U.S. Department of 
Homeland Security’s National 
Cyber Security Division. 

“The reason to have a stan- 
dard is it tells you, ‘Here’s how 
{a vendor] can make a claim, 
here are the attributes we are 
looking for, and here are the 
things you need to include 


| 
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when making a claim,’ ” Jar- 
zombek said. The DHS is in- 
volved in the effort to develop 
the standards framework. 

Government systems that 
are used for national security 
purposes already need to go 
through the Common Criteria 
Certification process to deter- 
mine whether they meet secu- 
rity requirements. The OMG’s 
framework — which still has 
to go through a long approval 
process — would give another 
option to agencies that aren’t 
mandated to use the Common 
Criteria, Jarzombek said. 

He added that a separate 
systems and software assur- 
ance standard being finalized 
by the International Standards 
Organization will give gov- 
ernment agencies yet another 
option for assessing software 
security. 

That standard is due to be 
approved sometime next year, 
according to Jarzombek. » 





_DAY 32: Can’t find anything. Can’t even find my desk. 
I’m drowning in a sea of data (gurgle). 


_DAY 33: Finally. I’ve taken back control. I have 
simplified my storage management with virtualization 
technology from IBM, consolidating the view of my 
data. Manageable. Simple. Genius. 


_Take heed, I.T. people of planet Earth. Call IBM. 
Before THEY take over... 
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Court Upholds Fine Over 
Chinese IT Investment 


TAIPEI, TAIWAN 
iE HEAD of He Jian Technology 
Tsuneo Co., a contract chip mak- 
er based in China, has lost his bid 
to overturn a fine imposed by the gov- 
ernment of Taiwan for illegally invest- 
ing in China’s semiconductor industry. 

A spokeswoman for the Taipei High 
Administrative Court said Hsu Jian 
Hwa, a Taiwanese national who is He 
Jian’s chairman, must pay the fine of 
2 million new Taiwan 
dollars ($59,800 U.S.) 
and withdraw his invest- 
ment in the chip company. 
However, Hsu can appeal 
the decision, the spokes- 
woman said. 

The court ruling is 
another sign of Taiwan’s 
drive to curb illegal in- 
vestments in China’s chip 
sector. Taiwan’s govern- 
ment carefully controls 
such investments, fearing 
that they could lead to job 
losses on the island or that 
its technology could be used to bolster 
China’s military. 

The government levied the fine 
against Hsu in February, saying that 
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Software Clears Spanish Site 
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he failed to apply to authorities before 
investing in He Jian. Hsu was the third 
Taiwanese national to be fined for mak- 
ing such investments. 

@ DAN NYSTEDT, IDG NEWS SERVICE 


U.K. Breach May Be 


| Wider Than Expected 


LONDON 

DENTITY THIEVES may have stolen 
Fpror government personnel records 

than first thought as part of a secu- 
rity breach in which the alleged cyber- 
criminals illegally routed 
tax credits to their bank 
accounts, British officials 
said last week. 

The breach, disclosed 
earlier this month by HM 
Revenue and Customs, the 
U.K.’s tax authority, forced 
the shutdown of a tax- 
credits Web portal. The 
site remained closed last 
week as an investigation 
into the thefts continued. 

The U.K. Department 
for Work and Pensions 
(DWP) initially said that 
the identities of about 1,500 of its em- 
ployees may have been compromised 
in the breach. That figure is now 
believed to be higher, a DWP spokes- 


Continental 
BV Eat 





woman said, although she wouldn’t 
provide a new estimate of the number 
of affected workers. Investigators are 
still trying to determine whose records 
were taken, the spokeswoman said. 

m@ JEREMY KIRK, IDG NEWS SERVICE 


HCL Wins Services Deal 
With Integrator in Japan 


BANGALORE, INDIA 


CL TECHNOLOGIES Ltd. last week 
said it has signed an agreement 


to provide a variety of offshore IT 


services to Exa Corp., a systems inte- 
grator in Kawasaki, Japan. 

The IT work will be done at HCL’s 
software development and services 
centers in Chennai and Noida, India. As 
part of the deal, HCL will implement 
large-scale migration and conversion 
projects and re-engineer legacy applica- 
tions for Exa customers. 

The Noida-based services firm said 
it will also develop and maintain manu- 
facturing software for Exa, which is 
a joint venture of IBM Japan Ltd. and 
JFE Holdings Inc., a Tokyo-based steel 
manufacturer. 

HCL estimated the contract’s value at 
about $100 million over five years. 

In another effort to boost its presence 
in Japan’s IT market, HCL last week 


| officially opened a technology design 


facility in Noida that was built through 
a joint venture with NEC Corp. ? 
@ JOHN RIBEIRO, IDG NEWS SERVICE 
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Briefly Noted 


ABN Amro Bank NV and MCI Inc. 
last week said they have signed a 
managed IT services contract valued 
at €500 million ($600 million) over 
five years. MCI will manage the 
Amsterdam-based bank’s LANs and 
WANs in 25 countries and provide 
firewall services in 60 nations. Those 
services were previously managed 
partly by ABN Amro and through 380 
contracts with IT providers. 


@ JEREMY KIRK, IDG NEWS SERVICE 


Powerchip Semiconductor Corp. 
in Hsinchu, Taiwan, said it will 
expand its production of a high- 
density flash memory chip known as 
AG-AND for Tokyo-based Renesas 
Technology Corp. Powerchip Semi- 
conductor already makes 1Gbit 
AG-AND flash chips for Renesas. 
The new agreement extends produc- 
tion te 4Gbit densities. 


@ DAN NYSTEDT, IDG NEWS SERVICE 


SAP AG has signed an agreement 

to resell Mercury Interactive Corp.'s 
LoadRunner software in an effort 

to help users optimize the perfor- 
mance and scalability of its business 
applications. SAP said LoadRunner 
can be integrated with its Computer 
Center Management System to au- 
tomate application load testing. 


@ JOHN BLAU, IDG NEWS SERVICE 


coming months, he added. 


For Takeoff at Continental 


BY TODD R. WEISS 

After two years of manual 
translation work by contrac- 
tors, Continental Airlines Inc. 
was still moving slowly toward 
creating a more fully featured 
Spanish-language version of 
its Web site. But the process 
ramped up in August, after the 
airline brought in software 
that automates much of the 
work involved in adding new 
languages to sites. 

The software enabled Con- 
tinental to go live on Nov. 16 
with a relaunched version of 
its Web site that expanded the 
airline’s very basic Spanish- 
language offerings to include 
its online flight-booking tool, 
said Ken Penny, director of 
Internet planning at Houston- 





based Continental and general 
manager of the Web site. 

Continental is using 
WorldServer, an application 
developed by Waltham, Mass.- 
based Idiom Technologies Inc. 
The airline, which is running 
WorldServer on a Windows 
Server 2003 system, has tied 
the software to Microsoft 
Corp.’s Visual SourceSafe 
version-control system and 
a database of the English-to- 
Spanish translations done by 
the outside translators. 

Penny declined to say how 
much the airline paid for the 
software, nor would he dis- 
close what it has spent on the 
translation project as a whole. 

Idiom doesn’t handle the 
actual word-for-word transla- 
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Web site has more Spanish-language content than it once did. 


tions. Instead, its software, 
which also runs on Linux and 
Unix servers, uses algorithms 
to automate the matching of 
English content to translations 
already prepared in Spanish or 
other languages. 

In addition to helping 
launch the initial translations, 
the software makes it easier to 


| keep the Web site updated by 


automatically making changes 
to the Spanish pages as their 
English counterparts are mod- 
ified, Penny said. 

Other pages that are cur- 
rently only in English, includ- 
ing ones for booking hotels 
and rental cars, may become 
available in Spanish in the 





Idiom’s competitors include 
SDL International PLC, a 
Maidenhead, England-based 
vendor that offers translation 
services as well as translation 
management software. 

Don DePalma, an analyst at 
Common Sense Advisory Inc. 
in Chelmsford, Mass., said Idi- 
om’s approach to wrapping its 
software around a company’s 
existing content management 
system means that users “don’t 
have to bulldoze what they’ve 
done before” to integrate 
translation management. 

The idea of making Web 
sites multilingual is growing, 
said Ron Rogowski, an analyst 
at Forrester Research Inc. He 
added that if Continental’s 
business strategy “is to focus 
on different markets, then 
they’ve got the backbone on 
which to build.” » 
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management and improve your access to your data 


Control your data with virtualization technology designed to increase 
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you work with work better. 


Control your data with dynamic allocation designed to sense where 
storage capacity is available and allot it automatically. 


Control your data by reducing interruptions to applications and getting 
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Continued from page 1 


7 
Linux 
of the 300 POS systems used 
in its stores from 5-year-old 
green-screen terminals run- 
ning IBM’s 4690 operating 
system to Windows 2000 
machines. The new systems 
will also run software called 
TransactionWare GM from 
Triversity Inc., a Toronto- 
based vendor that SAP AG 
acquired this fall. 

“We run Windows Server 
2003 and Windows XP on the 
desktop, so my administrators 
are very familiar with the Mi- 
crosoft kernel,” Fort said. He 
did strongly consider 360Com- 
merce Inc.’s Java-based POS 
software running on Linux. 
But Fort said he ultimately 
decided that the slightly more 
expansive features offered by 
360Commerce weren’t worth 
the extra cost and hassle. 


Virgin is running Micro- 
soft’s new Windows Embed- 
ded for Point of Service soft- 
ware on 206 in-store kiosks 
rolled out in October. Fort 
said that WEPOS costs 40% 
less than the older Windows 


| XP Embedded technology 
| and is easier to maintain. It 


also supports Internet access, 
multimedia applications and 
plug-and-play connectivity for 


| handheld scanners and other 


devices used by POS systems, 
he said. 


Market Positioning 
WEPOS will eclipse other 
flavors of Windows as Micro- 
soft’s primary POS offering 
and prevent Linux’s market 
share from exceeding 15% 
“anytime soon,” Buzek pre- 
dicted. Just 71,000 of the POS 
terminals sold in the U.S. last 
year ran Linux, making up 6% 
of the market, he said. He add- 


_ NEWS. 


increase to 8% or 
9% this year. 
IBM’s deal ear- 
lier this year to use 
Novell Inc.’s Linux 
Point of Service 


| software in its 


flagship POS of- 
fering could boost 
the open-source 
technology’s adop- 
tion rate by en- 
couraging retailers 
to migrate from 
their 4690 systems, 
Buzek said, noting that 15% of 
the POS devices in use now 
are 4690s. But he expects 
Windows, which ran on 71% 
of the terminals sold last year, 
to maintain its share. “When 
push comes to shove, Micro- 
soft still wins most battles,” 
Buzek said. 

Mike Prince, CIO at Bur- 
lington Coat Factory Ware- 
house Corp., has been running 
Linux on the 362-store cloth- 


MIKE PRINCE: Run- 
ning Linux, “I never 
HEN ROMER ar lle0 
PU aM eee 


ing chain’s retail 
systems since 
2000. Burlington 
Coat now has 5,000 
Wincor Nixdorf 
POS systems and 
2,000 Dell servers 
on Red Hat Linux 
in its stores — all 
maintained by a 
four-person team 
at its IT facility in 
New Hampshire. 

In addition to the 
store systems, the 
company has 45 servers run- 
ning Novell’s SUSE Linux oper- 
ating system and Oracle Corp.’s 
10g database in its central data 
center. Prince said he chose 
Linux for its stability, ease of 
remote administration and 
similarity to Unix. 

“There’s never been a virus 
in a store computer,” he said. 
“T never have to worry about 
things like that.” 

But Gordon Haff, an analyst 
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at Illuminata Inc. in Nashua, 
N.H., said Windows’ lingering 
reputation for insecurity and 
instability is without merit. He 
also noted that many retailers 
look at the availability of POS 
applications and equipment, 
where Windows still has an 
advantage over Linux, more 
than they consider the merits 
of the operating system itself. 
“The operating system is a 
small piece,” Haff said. 
Ritz Camera Centers Inc. 


} in Beltsville, Md., is a case in 


point — but on the Linux side 
of the ledger. In August, the 
1,200-store chain announced 
plans to upgrade its 4,000 
Unix POS terminals to SUSE 
Linux. Bob O’Hern, Ritz Cam- 
era’s senior vice president of 
information systems, said this 
month that the retailer is mov- 
ing to Linux partly because it 
wanted to run a Java applica- 
tion called Xstore from Data- 
vantage Corp. in Cleveland.» 





Continued from page 1 
Credit Cards 


the card information was ac- 
cessed. Last week, company 
officials didn’t respond to re- 
peated requests for comment. 

But Corinne Sherman, vice 
president of card services 
at the Pennsylvania Credit 
Union Association in Har- 
risburg, said that based on 
alerts from MasterCard Inter- 
national Inc. and Visa U.S.A. 
Inc., Sam’s Club appears to 
have been storing customer 
and account information from 
both tracks of the magnetic 
stripe on the back of cards. 
That information could be 
used by data thieves to create 
counterfeit cards that could 
then be used to commit fraud, 
Sherman said. 

Especially troubling is the 
fact that a very large number 
of merchants still appear to be 
capturing and storing the full 
magnetic stripe information 
off of credit and debit cards 
even though doing so violates 
the new Payment Card Indus- 
try (PCI) security standards, 
said Ann Davidson, payment 
systems risk manager at 
CUNA Mutual Group, a Madi- 





ed that Linux’s share should 
i The card 

’ associations 
are just not set up 
to deal with what 
they have started. 


AVIVAH LITAN. ANALYST, 
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son, Wis.-based company that 
provides insurance and finan- 
cial services to credit unions. 

Of the more than 300 fraud 
alerts that MasterCard and 
Visa have each issued this 
year, the majority involved 
cases where magnetic stripe 
information was stored after a 
transaction, Davidson said. 

“This is in direct violation 
of card association rules,” 
Davidson said. “I would love 
to know why merchants are 
doing this.” She added that 
CUNA Mutual has had several 
meetings with MasterCard 
and Visa to discuss the data 
storage issue. 

In April, the insurer filed a 
lawsuit against BJ’s Wholesale 
Club Inc. seeking to recover 
losses incurred as a result of a 
security breach that compro- 
mised 40,000 credit and debit 
cards. The lawsuit, which 





BJ’s is contesting, alleges that 
the retailer stored account 
and customer information in 
violation of MasterCard’s and 
Visa’s regulations. 

Many of the problems stem 
from the older point-of-sale 
systems that some merchants 
use to process card transac- 
tions, said Michael Petitti, a 
senior vice president at Am- 
biron TrustWave, a Chicago- 
based provider of security and 
PCI compliance services to 
the credit card industry. The 
POS systems often capture in- 
formation that the merchants 
operating them don’t even 
know about, Petitti said. 

Under the PCI standards, all 
companies that accept credit 
cards must comply with 12 
security requirements, such as 
encrypting transmissions of 
cardholder data, periodically 
running network scans, using 
logical and physical access 
controls, and doing activity 
monitoring and logging. 

But there continues to be 
a lot of confusion about the 
steps needed to fulfill the 
requirements, the validation 
processes and the conse- 
quences for failing to meet the 
mandates, said Avivah Litan, 
an analyst at Gartner Inc. 





“None of it is very clear at 
all, and it’s proving to be very 
frustrating for the merchants,” 





force the penalties associated 
with noncompliance, particu- 
larly when dealing with large 


Litan said. “The card asso- merchants, said an internal 
ciations are just not pile Sins financial analyst at 


set up to deal with 
what they have 
started.” But she 
added that based on 
information from 
some of Gartner’s 
clients, there are indications 
that the card associations 
and the banks that authorize 
merchants to process card 
transactions will start crack- 
ing down next year. 

Incidents such as the one at 
Sam’s Club are also a test of 
just how far Visa and Master- 
Card are willing to go to en- 


MORE ONLINE 


Credit unions say the fallout 
from retail security breaches 
can hit them especially hard: 
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a New York-based 
insurer. 

“This opens up 
some questions on 
how objectively 
they will deal with 
this issue,” said the analyst, 
who requested anonymity. 
“Will they pay favorable atten- 
tion to large retailers like Wal- 
Mart but be willing in a split 

second to cut off the mom-and- 
pop liquor store?” 

MasterCard and Visa didn’t 
respond to numerous requests 
for comment last week. > 





Corrections 

The “Global Fact” box in the 
Dec. 12 issue’s Global Dispatches 
column incorrectly identified 
Stockholm-based Post & Tele- 
styrelsen as a telecommunica- 
tions company. It is Sweden's 
national post and telecommuni- 
cations agency. 


The headline of a story in last 
week's News section about an SAP 


project being done by the govern- 
ment of Clark County in Nevada 
misstated the amount of money 
budgeted for the project. As noted 
in the story, the county expects to 
spend $38 million on the rollout of 
SAP AG's software. 


> The illustration that was published 


with On the Mark column in last 
week's News section was credited 
to the wrong artist. It was drawn by 
David Clark. 
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NEWS 


Mandriva Eyes Corporate Users in 
Bid to Expand Its Linux Business 


Third-place vendor moves to compete 
more broadly with Red Hat and Novell 





BY ERIC LAI 
ANDRIVA SA, now 
the third-largest 
Linux distributor 
behind Red Hat 
Inc. and Novell Inc., is push- 
ing to move from its consumer 
and small-business market 
niches into the realm of enter- 
prise IT. 

Service fees from corporate 
customers accounted for 30% 
of Mandriva’s $5.5 million in 
revenue for the fiscal year that 
ended Oct. 31, up from 10% in 
the prior year. In September, 
NEC Computers International 
BV, a Netherlands-based unit 
of NEC Corp., said it would 
bundle Mandriva Linux on 
the PCs and servers it sells in 
Europe. 

And Mandriva CEO Fran- 
cois Bancilhon said this month 
that the company will release 
Version 4.0 of its Corporate 
Server software by mid-2006, 
about 18 months after pre- 
decessor Mandrakesoft SA 
shipped the initial 3.0 release. 
He declined to comment about 
the upgrade’s new features. 

Paris-based Mandriva 
was formed earlier this year 
through the mergers of Man- 
drakesoft and two other Linux 
vendors: Brazil-based Conecti- 
va SA and Maple Valley, Wash.- 
based Lycoris Inc. 


Secure Upgrade 
Dan McDonald, network infra- 
structure manager at Austin 
Energy, the electric utility 
owned by the city of Austin, 
primarily runs an older Man- 
drakesoft version of Linux on 
20 servers. But he said he’s 
about to upgrade to Mandriva 
2006, an update that was re- 
leased in October and is aimed 
at home users and small and 
midsize companies. 

The Linux-based servers 
at Austin Energy run applica- 
tions such as Exchange 2003 





for e-mail, network manage- 
ment and security, as well as 
the utility’s mission-critical 

supervisory control and data 


acquisition (SCADA) software. 


The SCADA servers are 
blocked off from the Internet 
for security reasons, which 
made Red Hat Linux unsuit- 
able, according to McDonald, 


| who also tested that operating 


system. 

“My Red Hat boxes were al- 
ways running home to mama, 
always pinging the Red Hat 
Web site to download patches 
and updates,” he said. 

But despite favorable re- 





views from McDonald and 
some other corporate users, 
Mandriva will have a tough 
time challenging Red Hat and 
Novell in the Linux server 
market, said Gordon Haff, an 
analyst at Illuminata Inc. in 
Nashua, N.H. 

“For supported Linux enter- 
prise distributions in North 
America, Red Hat — witha 
smattering of Novell — is the 
only game in town,” Haff said. 
“It’s really hard to see what 
would suddenly cause [Man- 
driva] to become a success in 
North America.” 

Mandriva claims to have 
6 million to 8 million users 
worldwide, with about 20,000 
of them paying for support and 
maintenance. The company’s 





Corporate Server software 
supports both 32- and 64-bit 
hardware and starts at $369 
per server. Users of that prod- 
uct include French oil compa- 
ny Total SA, France Telecom 
SA, the city of Milwaukee, 
NASA and the U.S. Geological 
Survey, Bancilhon said. 
Mandriva’s other large cus- 
tomers include London-based 
HSBC Holdings PLC, which 
has 1,100 servers running 
Conectiva’s version of Linux, 


| and the public schools in Sao 


Paulo, Brazil, which have in- 
stalled 19,000 Conectiva-based 
desktops and servers. 

But most of Mandriva’s 
corporate customers in North 
America are small or midsize 
companies, such as Indianapo- 
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lis-based Global Transport 
Logistics Inc., which runs an 
older Enterprise Server ver- 
sion of Mandrake Linux on 
five servers. 

“Most haven't been rebooted 
in three to four years,” said 
Brent Meshier, the company’s 
network operations manager. ® 





Share Members Draw Up Vendor Wish List 


BY PATRICK THIBODEAU 

Share, a user group for IBM 
mainframe sites, has assembled 
a wish list of features that mem- 
bers want from vendors. The 
list includes enterprise open- 
source software, server consoli- 
dation features, interoperable 
calendaring capabilities and 

a standards-based distributed 
file system, said Robert Rosen, 
president of the Chicago-based 
group and CIO of the National 
Institute of Arthritis and Mus- 
culoskeletal and Skin Diseases 
at the National Institutes of 
Health in Bethesda, Md. In an 
interview with Computerworld 
last week, Rosen talked about 
the list and why it was created. 


By creating a wish list, are you try- 
ing to make Share and user groups 
more relevant? I don’t think 
user groups have become less 
relevant. I think what we’re 
really doing is getting the 
word to a broader audience 
about the kinds of things that 
Share is involved in and doing. 
This has to do with the big IT 
shop, the enterprises. Where 
are their pain points? Where 
would they like some relief? 





Why is a list created by Share mem- 
bers important? It’s important 
because we're the people in 
the trenches. We’re the people 
living with these problems, 
and we need these kinds of 
solutions. 


How important is vendor 
cooperation among Share 
members? Nobody has a 
one-vendor shop any- 

more. [Vendors] have 

got to work together, 

and standards are the 

only thing that is going 

to make this work. We 

are seeing more and 

more of our people in- 
terested in open systems and 
very interested in standards. 


Are Share members aggressive 
enough in demanding interoper- 
ability from vendors? I am sure 
there are some that are aggres- 
sive enough and others who 
aren't. I think that’s one of the 
strengths that Share brings to 
the process. We can leverage 
the voice of these managers 
in a more concentrated way. 
We're representing 2,200 or- 
ganizations — 80% of the For- 





tune 500. That’s a strong voice. 


Do you intend to publicly recog- 
nize vendors that create products 
that meet your interoperability 
requirements? Typically, those 
things are presented at Share 
meetings. [That’s] one 
of things that make the 
user group relevant: You 
can get that information 
and participate in those 
kinds of discussions. 


How would you rank the 
items on the list? It really 
depends. Different com- 
panies are going to have 
different pain points. 
More and more, as we move 
to the mobile stuff, battery life 
has become a bigger and big- 
ger issue. I think easier use of 
open software — so it installs, 
operates and [can be managed 
so it] works in an enterprise 
— is going to be one of the big 
areas. 


What open software in particular? 
Certainly, Linux is one. 


You don’t think that Linux is enter- 
prise-worthy? It still takes too 





much tweaking to really get 
up to where you want it be. 
Some people have that down, 
but especially in the small-to- 
midsize marketplace without 
big IT staffs, that’s an issue. 
The one thing that is going to 
be really interesting is Open- 
Office. Everybody says that 
buying Microsoft Office is ex- 
pensive, but the retraining cost 
to go to another package is 
astronomical. So I don’t know 
how you work all that out. 


Is there anything on this list that 
is IBM-specific? The Parallel 
File System [a high-perfor- 
mance cluster file system] is 
one area we are seeing a lot 
of interest in. 

Another one is the cell proc- 
essor for high-performance 
computing. Granted, most 
enterprises don’t view them- 
selves as HPC organizations, 
[but], in fact, more and more 
of them are. 

The other one — this was 
interesting — [is that] you 
want to ensure continuation of 
people coming into the IT field. 
You keep hearing that the IT 
field is not a good field to go 
into anymore, yet my personal 
belief is that it still is. » 
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OPINION 


DON TENNANT 


Skin in the Game 


’VE MADE NO SECRET of my aversion to ven- 
dorspeak. The reason is simple: Vendorspeak 
muddies rather than clarifies the vendor’s mes- 
sage, and deciphering it wastes way too much 
of your time and ours. 
The most frequently used term in the vendorspeak 
dictionary is, of course, solution. It’s also the most 


annoying, simply by 
virtue of its overuse and 
meaninglessness. It’s 
typically used as a syn- 
onym for product, which 
means it is, at best, a pos- 
sible or potential solution. 
Until it solves my prob- 
lem, it’s a product and 
nothing more. 

If solution is the most 
exaggerated term, partner 
is a close second. Ven- 
dors just love to refer to 
themselves as partners 
to their customers. Yet typically, by 
almost any measure, the relationship 
is anything but a true partnership. If 
I spend an obscene amount of money 
for a product and I don’t get a return 
on my investment, my company loses 
money and I may well lose my job. 
Meanwhile, my vendor’s sales rep 
is earning interest on the bonus he 
received at my expense. He loses, at 
most, a license renewal. Some part- 
nership. 

But suppose the vendor did lose 
something. Suppose I stipulate in the 
contract that if I don’t get a certain 
return on my investment within a 
specified time frame, I don’t pay a 
dime. By the same token, if my pay- 
back exceeds a certain dollar figure, I 
pay an even more obscene amount of 
money. Now that’s a partnership. 

The point is, the vendor has to 
have some skin in the game. And you 
should start thinking about demand- 
ing just that. 

When negotiating software li- 
censes, for example, be aware that 
the competition for your business 
can often be fierce. Many software 
vendors recognize that users are 
getting fed up with nonsensical li- 





censing arrangements 
(having to pay the vendor 
more money if a system 
is simply moved from 
one location to another, 
for example). And they 
know they have to end 
the craziness. 

ASG, a systems man- 
agement software vendor 
in Naples, Fla., certainly 
appears to have gotten 
the message. “Customers 
have reached the [limit] 
of what they’re willing 


| to pay for enterprise software, and 


they’re looking for alternatives,” ac- 
knowledges Jim Bladich, ASG’s vice 
president of sales operations. “IT ex- 
penditures are going up as a percent- 
age of revenue, and it’s beginning to 
be scrutinized.” 

To its credit, ASG is going the 
skin-in-the-game route. Last sum- 
mer, it introduced a revenue-based 





licensing model that may be a com- 
pelling alternative for companies 
that are dissatisfied with traditional, 
capacity-based pricing. There are 
various options under the model, 
according to Bladich, including one 
that enables the user company to 
lock in the fee so that if it’s project- 
ing steady revenue growth, the 
licensing fee stays the same for the 
duration of the contract. 

But consider this: Much of what 
ASG does is geared toward improv- 
ing business performance by means 
of offerings such as business service 
management software. And bet- 
ter business performance stands to 
generate more revenue. So what’s 
especially intriguing about ASG’s 
revenue-based model is the case in 
which a contract stipulates that the 
fee paid to ASG goes up or down 
based on the track of the user com- 
pany’s revenue. Suddenly the vendor 
has a real stake in the customer’s 
performance. 

The model’s not perfect, and it’s 
not for everybody. But it’s a positive 
step because it’s the result of ASG lis- 
tening to its customers. And vendor 
listening is a welcome respite from 
vendorspeak. » 
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JOHN D. HALAMKA 


The Peter 
Principle for 
Software 


{ THE late 1960s, Lau- 
rence J. Peter created the 
“Peter Principle,” postu- 

lating that managers are 
promoted to their level of 
incompetence, causing 


organizations to falter. As I reflect on 
the software tools I’m using in 2005, 
I’ve concluded that there is a soft- 
ware corollary to the Peter Principle 
— software evolves to the point that 
it’s unusable. 

I’m writing this column in Note- 
pad. Why? Have you tried writing 
an outline, end notes or an indented 
bulleted list using the latest word- 
processing software? Wizards and 
autoformatting tools try to anticipate 
what you're typing 
and in the process 
irreversibly scramble 
your work. 

Our modern oper- 
ating systems contain 
vast numbers of CPU- 
consuming add-ons: 

a wagging dog that 
searches for your 
files, invisible back- 
ground processes that 
constantly download 
patches and user- 
interface tchotchkes 
such as thumbnail 
previews of your mul- 
timedia. With all this 
increased complex- 
ity comes a lack of 
reliability, perpetual 
security holes and 
poor performance. 
Boot times are long, 
lockups are frequent, and viruses are 
epidemic. 

Although my computer today is 100 
times more powerful than what I had 
in the late 90s, my current environ- 
ment has less speed, lower productiv- 
ity and higher cost of ownership than 
my Pentium running Windows 98 Sec- 
ond Edition and Microsoft Office 97. 

In my view, it’s time to rethink 
what the industry is producing with 
thick-client software, bloated with a 
spiraling number of esoteric features. 
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OPINION 





What we need is “Google Office With 
Ajax for Linux” or “Microsoft Office 
Lite” — a Web-based, server-centric, 
thin-client application suite that isn’t 
perfect but is good enough. 

This is not about Microsoft vs. open- 
source. It’s about creating highly reli- 
able, usable tools that run anywhere, 
anytime. It’s about reining in the sales 
and marketing departments of soft- 
ware vendors whose revenue-growth 
targets propel them to offer feature- 
filled upgrades more often than the 
customer base desires. 

Here are a few examples: 

@ In Massachusetts, 500 doctors 
were offered their choice of electronic 
medical record systems at no cost. 
They were given a menu that ranged 





to hosted solutions based on Citrix to 
thin-client applications hosted entirely 
by an application service provider. 
Amazingly enough, nearly 100% of the 
doctors chose a thin-client, Web-based 
application, hosted and maintained en- 
tirely on the server side. They felt that 
less infrastructure, less installation 
and less local patching was ideal. 

@ As ClO at Harvard Medical School, 
I provide e-mail to 10,000 faculty mem- 


| bers, students and staffers, nearly half of 


whom run Apple hardware. Entourage, 


| the Outlook equivalent for the Macin- 


tosh, lacks just enough important fea- 
tures to keep my Apple users unhappy. 
Google’s Gmail isn’t perfect, but it’s cer- 
tainly good enough for most users and 


runs with the same features everywhere. 


@ The iPod ClickWheel is a perfect 


| example of less being more. In the lat- 
| est version of the iPod, buttons have 
been removed, and what remains is a 
simple, intuitive, highly usable inter- 
face that gets the job done. 

At dinner with Microsoft executives 
last year, I asked them to consider a 
lighter, cheaper, highly reliabie version 
of Microsoft Office. They responded 
| that surveys indicate that corporate 


| so there is no one set of minimal fea- 


I suspect that a closer look at this data 
would illustrate that a very few power 
users need advanced features but that 
the vast majority need the type of 
features included in the Gmail editor 
— fonts, colors and basic formatting. 
In 2006, let’s break the cycle of cre- 





customers use 90% of Office’s features, 


tures to include in a simplified product. 


| ating more complex, less reliable, less 
| usable software and agree that less is 
| more. I encourage the software indus- 
| try to take a lesson from Gmail and 


other successful thin, good-enough 


| applications. Do we need Longhorn 
| Vista and a new 3-D graphics engine- 


| driven user interface with so many 

| lines of code that it will be a challenge 
| for even the most brilliant program- 

| mers to maintain? 


We need the Toyota Prius of soft- 


| ware — “Google Office With Ajax 


for Linux” or “Microsoft Office Lite” 
— and not the Hummer.» 


WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 


www.computerworld.com/columns 





from thick client/server applications 


Trying a New 
Approach to IT 


FOUND MICHAEL Hugos col- 


umn “The Rhythm of the Quarters” 


[Oct. 17] to be informative and a 
good read. | work for a chain of 
upscale health clubs. The business 
people are very savvy at what they 
do, but IT is considered more a nec- 
essary evil than a strategic arm. 
Over the 18 months that I've been 
here, | see that perception slowly 
changing, but getting a sufficient 
budget is quite an arduous process. 
Perhaps that is as it should be, but 
I'm going to consider Hugos' ap- 
proach for 2006. 
Ed Cohen 
Director, IT services, The Well- 
bridge Co., Greenwood Village, 
Colo., ecohen@wellbridge.com 


SOAs Can Help 
Lead to Agility 


READ WITH interest the opinion 
piece “The Loosely Coupled 


Enterprise: The Secret to Speed 


and Flexibility” [Computerworld.com, 


Oct. 20]. While there are develop- 
ment reuse benefits to approaching 
loose coupling without service- 
oriented architectures, the most 
dramatic benefit of loose coupling 
- business agility - is achieved 
through SOA-style intermediation. 
An intermediary acts as an intelli- 
gent “switchboard operator,” which 
can route service requests to the 
appropriate service. This routing 
can be done on the basis of identity, 
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service contracts, service-level 
agreements, load balancing, con- 
tent-based routing, service delivery 
preferences and a host of other 
parameters. This style of dynamic 
late binding at the intermediary level 
enables organizations to go beyond 


| development reuse and into SOA 


governance and business agility. 
Miko Matsumura 

Vice president of technology 
standards, Infravio Inc.; chairman, 
OASIS SOA Blueprints Technical 
Committee, Cupertino, Calif., 
miko@infravio.com 


Is Your Work 


| Worthwhile? 


HE OCT. 24 salary survey 
asked what matters most to you 

about your job. Missing from the 
list is the factor most important to 
me. | have quit jobs that paid well 
and were technically interesting and 
challenging but didn’t make me feel 
like | was contributing anything 
really important. 

Today, | feel very passionate about 
my work, since it contributes to 
a worthy goal of safe, economic, 
reliable and hassle-free gas and 
electricity delivery. In future surveys, 
you might consider including a “Job 
is worth doing” option for your re- 
spondents. Though | might want to 
leave a job if it did not offer enough 
of the other factors listed, what mat- 
ters most to me is that I'm working 
on something important. 
Bob Hemler 


IT consultant, Baltimore 


Alternatives to 


| Two-Factor Exist 
RUE TWO-FACTOR au- 
thentication is a lot to ask of 
consumers [“Fear of Phishing Hurts 
| Banks,” Computerworld.com, Oct. 
25]. Its slow adoption by corpora- 
tions shows the resistance people 
| have for it. 

An approach that may be viable is 
full-machine fingerprinting, i.e., us- 
ing a full-device fingerprint as a sec- 
ond factor, the same way that many 
publishers use machine IDs to lock 
their software licenses to specific 
machines to fight software piracy. 

Systems like this are being inves- 
tigated in financial institutions like 
the Chicago Board of Trade and by 
telecommunications vendors. 

Ric Richardson 

Freelance technologist, R2Labs, 
| Huntington Beach, Calif. 
ric.r@r2labs.com 


| Alaska Beckons 


Data Centers 
N INTRIGUING idea once 
brought forth was setting up 
huge data centers near the North 
Slope oil fields here in Alaska — free 
air conditioning using cooling tubes 
buried in the ground or exposed to 
ambient air [“Redefining Cool,” Oct. 
31]. The excess heat could be used 
to help heat the facility or melt snow 
for water. 
Plenty of natural gas for energy. 
and it’s a great point from which to 








| connect fiber to the rest of the world. 


Plenty of local support services in 
terms of air transportation and road 
access. 

Typical local work schedules are 
two weeks of 12 hours on, 12 hours 
off and then two weeks off. Com- 


| mute time from home is a bit longer 


than most jobs but involves little ac- 
tual driving. And the view is unique. 
It also appears to make sense. 

Bob Hoffman 


Anchorage, Alaska 


Recalling the 
Wild, Wild East 


LIVED IN Hong Kong from ‘82 to 

‘93 and started the first computer 
club, SEAnet. Of Don Tennant's edi- 
torial “Opium Wars” [Nov. 7], | can 
only say, how true. 

Sham Shui Po was a mandatory 
haunt, since there was no legitimate 
distribution of software. | took a 
film crew from the CBC into the 
Golden Arcade around ‘85, when 
software piracy was really getting 
going. We managed to film for about 
10 minutes, when tattooed guys 
with cricket bats showed up and 
suggested loudly in Cantonese that 
our health would be better outside 
the building. 

| also remember inviting a rep 
from Ashton-Tate (the dBase guys) 
to one of our meetings to discuss 
why it cost double to buy the soft- 
ware in Hong Kong and why there 
was no support. He had a rough 
evening. 

Waleed Hanafi 


Consultant, Singapore 


| 





Timely Data Has 


| Long Been an Issue 


IRTY DATA is only one as- 
pect of building coherence in 


| information systems and business 
| organizations [“Dirty Data Blights 


the Bottom Line,” Nov. 7]. IT has 
been charged with delivering timely 


| business information since time 


immemorial but falls far short of 


| this goal. 


Timely information is, of course, 
data that is accurate, accessible, 


| coherent, comprehensible, timely 
| and useful. IT continues to employ 
| automation paradigms that date to 
| electronic accounting machines 


Mechanizing tasks is no longer 


| aviable strategy. Perhaps that is 


why new development projects are 


| often outside the scope of many IT 
| departments. 

| Walt Sawka 

| CEO, CoherentEnterprise LLC, 


Ringwood, N.J., wsawka@ 


| coherententerprise.com 


| COMPUTERWORLD welcomes 


comments from its readers. Letters 
will be edited for brevity and clarity 
They should be addressed to Jamie 


| Eckle, letters editor, Computer- 


world, PO Box 9171, 1 Speen Street 
Framingham, Mass. 01701. Fax 


| (508) 879-4843. E-mail: letters@ 


computerworld.com. Include an 
address and phone number for 
immediate verification. 

For more letters on these 

and other topics, go to 
www.computerworld.com/letters 
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QUICKSTUDY 
Deep Web 


| 
The deep Web is a vast sea of information that | 
can be accessed via the World Wide Web but can’t 

be indexed by traditional search engines. Also | 
known as the “invisible Web,” it’s estimated to be 


500 times as large as the “surface Web.” PAGE 28 of least privilege. PAGE 34 
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SECURITY MANAGER'S JOURNAL 

Rising to a Higher Standard Isn’t Easy 
In response to complaints that someone in-house 
might be snooping on employee computers, 

CJ. Kelly feels the need to implement two best 
practices: separation of duties and the principle 


OPINION 

The Diskless PC Revolution 
Curt A. Monash says the use of flash 
drives may soon mean that operating 
systems and applications will be 
joining data in users’ pockets. 


PAGE 36 


As the available options multiply, it becomes 
increasingly important for businesses to 
match collaboration tools to their needs. 


OBB CHAPMAN, an IT spe- 

cialist at the Centers for 

Disease Control in Atlanta, 

discovered how complicated 
the choice of a collaboration tool can 
be when he became involved in the 
CDC’s effort to purchase software 
that would let researchers work more 
effectively with universities and state 
health agencies. The options proved 
so numerous that the agency hired an 
outside consultant to sort through all 
the candidates — an effort that took six 
months. 

“Different vendors 
had different bundles 
of functions — dis- 
cussion boards, Web conferencing, 
document sharing,” Chapman recalls. 

“It got quite complicated for us to deter- 
mine whether we needed a single, inte- 
grated product with all of the functions 
or several best-of-breed products.” 

In the not-so-distant past, the options 
for collaborating with customers and 
colleagues were fairly limited: e-mail, 
file transfer protocol (FTP), perhaps a 
listserv for group discussions. Today, 
the choices are more numerous — and 
more difficult to sort out. 

Chapman’s sense of confusion about 
selecting a collaboration product is 


BY SUE HILDRETH 





| shared by many IT managers, and for 


good reason. There are close to 1,000 
vendors in the collaboration market, 
according to David Coleman, manag- 
ing director of Collaborative Strategies 
LLC in San Francisco. “There are way 


| too many vendors,” he says. Coleman 
| projects that sales of collaboration soft- 


ware, services and related hardware 
will reach $40 billion in 2008, with an 
average annual growth rate of 13%. 

The products offer a range of fea- 
tures, such as instant messaging, virtu- 
al team collaboration 
rooms, Internet audio 
and video, screen 
sharing, wikis for 
group posting and editing of content, 
blogs, whiteboards and repositories for 
accessing common documents. Prod- 
ucts may have one or many of these 
funciions bundled together. 

To complicate matters further, many 
large organizations treat collaborative 
tools as a departmental decision, al- 
lowing line-of-business managers to 
bring in whatever they want. That has 
led to a proliferation of products within 
companies, many of them totally un- 
known to corporate IT. Coleman says 
most large companies have 10 to 12 

Continued on page 26 


It got quite complicated for us to 
determine whether we needed a 


single, integrated product with all of the 
functions or several best-of-breed products.” 
ROBB CHAPMAN (LEFT), IT SPECIALIST, CENTERS FOR DISEASE CONTROL 





3 


oy 


To: 


wrestling with. backup issues 


cooking with gas 


| 


EMC 


ikea as 
gata al 
PROGRAM 


EMC 


where information lives 


“NOBODY ELSE.OFFERED A SOLUTION THAT ALLOWED US TO LEVERAGE cs 4 
WHAT WE INVEST TODAY TOWARD OUR FUTURE NEEDS.” 


Bob Travatello 
ClO, Blue Rhino 


Blue Rhino is a midsize company that had a king-sized problem. As the #1 brand in propane tank 
exchange, their information storage needs were growing at 100 percent a year. But their IT budget wasn’t. 
They chose an EMC solution that gave them less downtime, faster backups, and quicker recovery times. 
The entire package, hardware and software, delivered a high degree of flexibility at an affordable price 


and allowed them to keep their focus on their customers. Talk to your EMC Velocity’ Partner to learn more 


about EMC solutions that start simple and stay simple. 


Read the Blue Rhino profile at www.EMC.com/BlueRhino, or call 866-796-6369 to learn more 








www.computerworld.com 


TECHNOLOGY 


E-mail is often used for collaboration when 
it shouldn't be. Often, [employees] just don’t 


understand that there are better things out there.” 
DAVID COLEMAN, MANAGING DIRECTOR, COLLABORATIVE STRATEGIES LLC 


Continued from page 23 
collaborative applications. 
“It’s been line-of-business adoption, 


with a manager signing the contracts,” 


notes Robert Mahowald, an analyst at 
market research company IDC. 
Lower-level employees, on the 
other hand, tend to stick with e-mail, 
resisting newer communication tools. 
“E-mail is often used for collaboration 
when it shouldn’t be,” notes Coleman. 
“Often, they just don’t understand that 
there are better things out there.” 


Who Needs It? 

The CDC’s role as both a research 
agency and crisis management leader 
in the event of a regional or national 
health emergency makes it an obvious 





candidate for collaborative technolo- 
gies. The agency chose SiteScape Inc.'s 
Enterprise Forum, which allows it to 
collaborate with outside health agen- 
cies and research groups, as well as 


| quickly create a virtual “war room” 


to deal with a health crisis. With Site- 
Scape, the CDC can create a team work 
space and accounts for new team mem- 
bers, share documents and schedule 
Web meetings and notify attendees 

via e-mail, automated phone calls and 


| SMS messages. Related groups may be 


created to coordinate emergency re- 
sponders and disseminate information 
to hospitals. Later, the workspace can 
be archived for historical and auditing 
purposes. 

But it’s not always so clear that a 


having storage headaches 


making storage simple 


NOW STORAGE RELIEF COMES IN 


business can use collaborative technol- 
ogies. There are general organizational | 
characteristics of companies that need 


collaboration software. 

Distributed teams. Few large orga- 
nizations have just one facility, and 
they need a way to make it easier for 
employees in different locations to col- 
laborate. Their options include simple 
| tools such as instant messaging appli- 
| cations, which workers can use to get 


| quick answers to urgent questions, and 


more elaborate software such as vir- 
tual team rooms where employees can 
collaborate on shared projects. 

Such is the situation in the corporate 
| Internet group at financial services 
firm J.P. Morgan Chase & Co. With IT 
staffers scattered among four U.S. cit- 
| ies, employees have had to use e-mail 
| and the phone to work on Web proj- 
ects. But e-mail isn’t ideal for sharing 
large files or holding threaded group 
discussions. So the Internet group 
implemented Microsoft Corp.’s Share- 
| Point Services, which enables staffers 
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to remotely access a central repository 
of documents and create Web sites for 
| different projects. 

“We store test plans, project plans, 
requirements documents, issues logs, 
status reports, etc.,” says Michael 
Brown, senior project manager in the 
corporate Internet group. “We have 

| architects in different cities, so all want 

| to have a site where they can share in- 
formation.” 

| Down the road, they'll add a wiki — 

| or HTML-based pages that team mem- 

| bers can use to post content online 

| — and a blog for publishing employee 

| commentary. 

Road warriors. Business travel will 
never go away, but employees can save 
considerable time and money with vir- 
tual-meeting technologies. 

Pemco Aviation Group Inc. uses Ora- 
cle Content Services for webcasting, as 
well as fax, phone, e-mail and instant 

| messaging. Thanks to the webcasting 
feature, the Birmingham, Ala.-based 
| company’s engineers now log fewer 
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frequent-flier miles visiting customers. 
“If they want to make a customer 
presentation, they start the Web con- 


ference at their desk, turn on recording, 


do the presentation and put it on the 
Web site,” says John Griffith, Pemco’s 
director of IT, noting that they can also 
opt to do a live webcast. 

Likewise, Dow Corning Corp. in 
Midland, Mich., has noticeably reduced 
employee travel through the use of 
both Documentum Inc.’s eRoom for 
document collaboration and WebEx 
Communications Inc.’s webcasting ser- 


vices for online meetings and seminars. 


WebEx has substantially decreased 
the need to travel for marketing pre- 
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| staff first deployed a MatrixOne Inc. 
| document management application 


and then integrated that with BEA Sys- 
tems Inc.’s AquaLogic (formerly from 


| Plumtree Software Inc.). AquaLogic 
| provides additional features, such as 


the ability to integrate multiple back- 
end applications and, on a more basic 
level, a place to post company news. 

When the implementation is com- 
plete, in early 2006, both suppliers and 
customers will be able to access prod- 
uct documents as well as check the 
status of purchase orders and requests 
for quotations. 

Training without travel. When employ- 
ees need to take a class to earn a de- 


i E-mail Isn’t Enough 


ALL LARGE ORGANIZATIONS need more 
than just e-mail these days, say industry ana- 
lysts. But there are some activities that require 
collaborative technologies more than others. 
Collaborative Strategies consultant David Cole- 
man has identified six types of activities that 
are ripe for collaboration tools: 

® Creating sales proposals or responding to a 

request for proposals. 
@ Exception handling in customer service, 


sentations, technical support and 
partner training, notes Ben Martinson, 
enterprise application engineer at Dow 
Corning. “It’s used to troubleshoot 
problems by utilizing the desktop and 
application-sharing functionalities,” he 
explains. “And some internal business 
{units] have moved to WebEx to host 
distributor training.” 

Paperwork overload. The Babcock & 
Wilcox Co. (B&W), a $1.4 billion manu- 
facturer of power-generation equip- 
ment, had a document management 
problem. Each order for a new piece of 
equipment inevitably created a flood of 
documents — contracts, product speci- 
fications, purchase orders, product 
designs and documentation. Most of 
these were sent via FedEx or uploaded 
to one of the thousand or so FTP sites 
created by B&W employees. Keeping 
track of the location or current version 
number of any particular document 
had become extremely difficult. 

“If I sent a drawing out to somebody, 
I had absolutely no idea what they’d do 
with it,” says Penny Sherrod, B&W’s 
director of enterprise systems. She also 
notes that the company incurred sig- 
nificant costs by express-mailing docu- 
ments back and forth. 

So a couple of years ago, B&W began 
moving its documents online. The IT 





when resolving a customer problem may 
require the involvement of several employ- 
ees or departments. 

@ Research and development. 

@ Education and training. 

@ Crisis management. 

@ Managing outside partners, when a 
company has muitiple relationships with 
external partners that must be managed and 
documented. 


gree, obtain certification or just hone 
their skills, they often must travel to 
a classroom. But the advent of virtual 
classrooms promises to make profes- 
sional development a great deal easier. 
it’s making learning easier and more 
enriching for students and staff in the 
Nechako Lakes Schools District, which 
is located in a rural part of British 
Columbia. Thanks to computer-based 
learning, students can take classes of- 


fered only at other schools in the district. 


The program has expanded from 
13 to 1,200 students, who take part in 
discussion forums, webcasts, live chats 
and breakout sessions using the Lotus 
Domino Virtual Classroom. Instruc- 
tors also use the Lotus Learning Man- 
agement System to handle class sched- 
uling, course creation, enrollment and 
other tasks. 

Ernie Mannering, director of infor- 
mation services and technology for 
the district, says the virtual classroom 
provides opportunities for students to 
interact with a larger group of students, 
as well as absorb lessons better. “it 
gives students more time to compose 
their thoughts,” he says. 

Of course, the biggest benefit is be- 
ing able to take a class via a computer 
rather then driving miles to a physical 
classroom — a benefit that business 
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Once you know what the word collabora 
tion means to you from a process perspec- 


tive, then you can start looking at your budget and 
what technology is out there. 
MICHAEL BROWN, SENIOR PROJECT MANAGER, J.P. MORGAN CHASE & CO. 


professionals can appreciate as well. 

Once you have a basic idea of what 
type of software you need — web- 
casting for meetings or document man- 
agement for paper-intensive projects 
— the next step is to evaluate the tech- 
nical requirements of the products. 

Integration is one issue to consider; 
many collaboration products have to 
interoperate with others, such as a 
document management package and a 
portal, or IM and e-mail. 

“One example is your typical group- 


| ware application, which has calendar- 


ing and scheduling, a company direc- 
tory and things like that. Those bits 
and pieces need to be pretty tightly 
integrated,” observes IDC’s Mahowald. 

Then comes maintenance. Applica- 
tions that bundle multiple collabora- 
tive features may be easier to maintain 
than a collection of technologies from 
different vendors. 

“Because they integrate so well 


| together, maintenance is easier. I 


didn’t have to add anyone to support 
Oracle Content Services,” says Pemco’s 
Griffith. “I’ve got the same group of 
people doing e-mail, calendar, Oracle 
Content Services, instant messaging, 
voice mail, Web conferencing and fax.” 





Hardware, of course, is another issue. 
Will the application require its own 
server, or conversely, does it need to 
share space with your database? If you 
opt for webcasting, can your network 
handle the bandwidth demands? 

How about security? At the CDC, IT 
staffers had to ensure that any applica- 
tion would work with the extranet se- 
curity framework already in place. 

And don’t forget scalability. Your 
collaboration tool may start as a de- 
partmental application, but someday 
you may want to expand it to the entire 
company. Can it scale? 

The choice really depends on three 
basic factors, says Brown at J.P. Mor- 
gan Chase. “It comes down to how 
dispersed your team is, what type of 
collaboration you need to do — like do 
you need to collaborate on documents 
or just share access to them — and 
your budget,” he says. “Once you know 
what the word collaboration means to 
you from a process perspective, then 
you can start looking at your budget 
and what technology is out there.” » 
Hildreth is a freelance technology writer 
in Waltham, Mass. She can be reached 
at Sue.Hildreth@comcast.net. 
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A RELUCTANT EMPLOYEE population can 
foil even the best-planned collaborative imple- 
mentations. 

Managers may shun collaborative products 
because they don’t see how they might im- 
prove their departments’ efficiency. Consultant 
David Coleman at Collaborative Strategies 
recalls speaking to a sales manager who was 
worried about his staff's decreasing ability 
to win contracts. The company had recently 
expanded, and it was difficult to get the right 
people together to draft a quality proposal on 
deadline. “To him, it was a sales management 
problem. But it was really a collaborative 
problem,” says Coleman. “A virtual team room 
would really solve his problem.” 

Another obstacle is employee resistance 


was a big change from the usual methods of 
sharing documents — via e-mail, FTP sites or 
FedEx. So far, few employees have joined. 

“About 4% are using eRoom, whereas 
70% could make use of it,” says Ann Marie 
Horcher, an enterprise application engineer 
at Dow. 

According to David Via, an analyst at Fer- 
tis Research, a research firm that covers the 
collaborative software market, that attitude is 
common. “People get frustrated with the us- 
ability, and they're back to e-mail,” he says. 

Horcher thinks Dow employees would like 
eRoom if they'd just give it a chance. To tempt 
them, Dow plans to embed a link to eRoom in 
the company e-mail client. 

“My feeling is that once we put it on the 
menu [of Outlook], we will see a lot more inter- 
est,” Horcher says. 

~ SUE HILDRETH 
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DeepWeb 


DEFINITION 


The deep Web, also called the invis- 
ible Web, refers to the mass of infor- 
mation that can be accessed via the 
World Wide Web but can’t be indexed 
by traditional search engines — often 
because it’s locked up in databases 
and served up as dynamic pages in re- 
sponse to specific queries or searches. 


BY RUSSELL KAY 

OST WRITERS 

these days doa 

significant part 

of their research 
using the World Wide Web, 
with the help of powerful 
search engines such as Google 
and Yahoo. There is so much 
information available that one 
could be forgiven for thinking 
that “everything” is accessible 
this way, but nothing could 
ber further from the truth. 
For example, as of August 
2005, Google claimed to have 
indexed 8.2 billion Web pages 
and 2.1 billion images. 
That sounds impressive, 
but it’s just the tip of 
the iceberg. Behold the 
deep Web. 

According to Mike 
Bergman, chief technology 
officer at BrightPlanet Corp. 
in Sioux Falls, S.D., more than 
500 times as much informa- 
tion as traditional search 
engines “know about” is avail- 
able in the deep Web. This 
massive store of information 
is locked up inside databases 
from which Web pages are 
generated in response to spe- 
cific queries. Although these 
dynamic pages have a unique 
URL address with which they 
can be retrieved again, they 
are not persistent or stored 
as static pages, nor are there 


links to them from other pages. 


The deep Web also includes 
sites that require registration 
or otherwise restrict access to 
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their pages, prohibiting search 
engines from browsing them 
and creating cached copies. 

Let’s recap how convention- 
al search engines create their 
databases. Programs called 
spiders or Web crawlers start 
by reading pages from a start- 
ing list of Web sites. These 
spiders first read each page on 
a site, index all their content 


| and add the words they find to 


the search engine’s growing 
database. When a spider finds 
a hyperlink to another page, it 
adds that new link to the list 
of pages to be indexed. In time, 
the program reaches 
all linked pages, pre- 
suming that the search 
engine doesn’t run 

out of time or storage 
space. These linked 
pages, reachable from other 
Web pages or sites, constitute 
what most of us use and refer 
to as the Internet or the Web. 
In fact, we have only scratched 
the surface, which is why this 
realm of information is often 
called the surface Web. 

Why don’t our search en- 
gines find the deeper informa- 
tion? For starters, let’s consider 
a typical data store that an in- 
dividual or enterprise has col- 
lected, containing books, texts, 
articles, images, laboratory re- 
sults and various other kinds 
of data in diverse formats. 
Typically we access such data- 
based information by means 
of a query or search — we 
type in the subject or keyword 
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we're looking for, the database 
retrieves the appropriate con- 
tent, and we are shown a page 
of results to our query. 

If we can do this easily, why 
can’t a search engine? We as- 
sume that the search engine 
can reach the query input (or 
search) page, and it will cap- 
ture the text on that page and 
in any pages that may have 
static hyperlinks to it. But un- 
like the typical human user, 
the spider can’t know what 
words it should type into the 
query field. Clearly, it can’t 
type in every word it knows 
about, and it doesn’t know 
what’s relevant to that particu- 
lar site or database. If there’s 
no easy way to query, the un- 
derlying data remains invisible 
to the search engine. Indeed, 
any pages that are not eventu- 
ally connected by links from 
pages in a spider’s initial list 
will be invisible and thus are 
not part of the surface Web as 
that spider defines it. 


How Deep? How Big? 
According to a 2001 Bright- 
Planet study, the deep Web is 
very big indeed: The company 
found that the 60 largest deep 
Web sources contained 84 
billion pages of content with 
about 750TB of information. 
These 60 sources constituted 
a resource 40 times larger 
than the surface Web. Today, 
BrightPlanet reckons the deep 
Web totals 7500TB, with more 
than 250,000 sites and 500 
billion individual documents. 
And that’s just for Web sites in 
English or European character 
sets. (For comparison, remem- 
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ber that Google, the largest 
crawler-based search engine, 
now indexes some 8 billion 
pages.) Bergman’s company, 
a vendor of deep Web har- 
vesting software that works 
mainly with the intelligence 
community, accesses sites 

in over 140 languages, many 


based on non-Latin characters. 


BrightPlanet routinely ships 
its products with links to over 
70,000 deep Web sources, all 
translated into English. Berg- 
man says that his customers 
are probably accessing two to 


three times that many sources. 


The deep Web is getting 
deeper and bigger all the 
time. Two factors seem to 
account for this. First, newer 
data sources (especially those 
not in English) tend to be of 
the dynamic-query/search- 
able type, which are generally 
more useful than static pages. 
Second, governments at all 
levels around the world have 
made commitments to making 
their official documents and 


records available on the Web. 
Bergman says he’s aware of at 
least 10 U.S. states that main- 
tain single-access portals to 
all state documents and public 
records. 

Interestingly, deep Web 
sites appear to receive 50% 
more monthly traffic than 
surface sites do, and they 
have more sites linked to 
them, even though they are 
not really known to the public. 
They are typically narrower 
in scope but likely to have 
deeper, more detailed content. 
According to Bergman, only 
about 5% of the deep Web re- 
quires fees or subscriptions. > 
Kay is a Computerworld con- 
tributing writer in Worcester, 
Mass. You can contact him at 
russkay@charter.net. 


Are there technologies or issues you'd like 
to lean about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 


Into the Deep Web 
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When dealing with the deep Web, keep these points in mind: 


Information that is stored in a database is a part of the 
deep Web. This can include large listings of things with a 
common theme. All directories are part of the deep Web. 


* Information that is new and dynamically changing, such 
as news or stock and bond prices, will appear on the deep 


Web. 


w Web sites of searchable databases can be retrieved via 
directories and search engines. This may be thought of as 

“split-level searching.” For the first level, search for the data- 
base site. For the second level, go to the site and search the 
database itself for the information you want. 


© Many search engine sites and commercial portals feature 
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SOURCE: UNIVERSITY LIBRARIES, UNIVERSITY AT ALBANY, STATE UNIVERSITY OF NEW YORK 


searchable databases as part of their package of services. 


m Some search engines will search the deep Web for 
related content subsequent to an initial search. 


The results of a query on any topic in the deep Web can 
be extremely varied. This makes it impossible to anticipate 
what might turn up in a database. In addition, this coverage 
will be fluid as databases proliferate on the Web. 


® Some of the information stored on Web-accessible da- 
tabases may not be substantive or useful to most search- 
ers. As with all Web searching, it is important to tailor the 

query to the tool. 
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A STROLL THROUGH THE TECHNOLOGY LANDSCAPE 


Web-based Database 
Of Mouse Brain 
Should Aid Research 


RESEARCHERS AT the U.S. Department of 
Energy's Brookhaven National Laboratory in Upton, 
NY., have launched a Web-based 3-D digital atlas 


and database of the brain of a popular type of labora- 


tory mouse 

“Neuroscientisis around the 
world can now download these 
extremely accurate anatomical 
templates and use them to map 
other data, such as which parts of 
the brain are metabolically active 
and where particular genes are 
expressed,” said project leader 


3-D digital rendering of the adult 
Pao Wine ie 


Helene Benveniste, a researcher in Brookhaven's 
medical department and a professor of anesthesiol- 
ogy at Stony Brook University. 

The database was created using high-resolution 
magnetic resonance microscopy at the University 
of Florida in collaboration with researchers from 
Brookhaven's Center for Translational Neuro- 
imaging. The work was done in parallel with the 
Mouse Phenome Database project, which aims to 
establish a collection of baseline 
phenotypic data from commonly 
used inbred mice. 

The new brain-atlas database 
consists of 3-D anatomical data 
from 10 adult male mice of the strain 
C57BL/6u. It contains data on 20 
segmented structures and down- 
loadable visualization tools. 
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Robo-patients Let Students ' 


Practice Medicine 


ROBOTIC SIMULATED PATIENTS are 
allowing students in the Michael G. DeGroote 
School of Medicine to practice clinical skills 
before they treat human patients. 

Asimulator lab training center set up by the 
anesthesia department allows students to 
experience the challenges 
of working in a hospital 
operating room in a setting 
that looks and functions 
as closely as possible to 
the real thing. The new 
training lab at the McMaster 
University Health Sciences 
Centre in Hamilton, Ontario, 
features computer-operated 
medical equipment hooked 
uptowhatappearstobea x 
realpatientonanoperat- 2 
ing room table. In fact, the 
patient isa$100,000com- = 
puterized, humanlike robot that mimics bodily 
functions such as respiration and heartbeat, 
as well as swelling and other changes that an 
actual patient might experience. 

Medical students learn how to administer 
anesthesia and monitor the patient and medi- 
cal equipment. From a control room in the lab, 
instructors watch the students and manipulate 
the mannequin’s responses to mimic what 
might occur in a real-life situation. For example, 
they cou'd change the mannequin’s heart rate 
or breathing or make its throat or tongue swell, 
requiring the students to think on their feet and 
make the necessary adjustments. 
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The use of simulation technology at McMas- 

§ ter will expand significantly in coming months, 

' because its School of Nursing will be using gov- 

' ernment funding to establish another simulation 
lab, complete with a family of robo-patients. 

The lab will have anatomically correct, 
computerized mannequins that can speak and 

1 simulate different medical conditions, provid- 

1 ing nursing students with a virtual hospital 
experience in which they can 
practice assessment and 

treatment and apply their 

} problem-solving skills. It will 
be used by students of the 
Conestoga nursing program 
and will eventually expand to 
offer training for students in a 


Teachers at McMaster Urfiversity 
demonstrate the computerized 
Pe mera 


1 that students receive the most advanced train- 
1 ing possible. 

1 “The students are more confident and 
skilled,” Buckley said. “They understand more 
of what the clinical instructors are showing 

: them, and they are able to assimilate more of 
i what they are seeing and doing.” 

i Catherine Tompkins, associate dean of 

j McMaster’s School of Nursing, said, “Simula- 
;_ tion technology represents the wave of the 

;_ future and will provide our students with the 

1 State-of-the-art tools necessary to further their 
1 training and prepare them as the leaders in our 
4 future health care environment.” 


Not All Business 


In.a September survey of corporate e-mail 
users by Mirapoint Inc. and The Radicati Group 
Inc., 72% of respondents said they forward 
personal e-mail such as jokes, video clips 

and funny photos from their business e-mail 
Lm eO Un ices Merete) Relm eels 81a 11I 


Base: 363 corporate e-mail users 


SOURCE: EMARKETER INC., NEW YORK 


Page compiled by Tommy Peterson. 
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C++ Reading List 


These books offer advice about topics such as writing more-efficient 
C++ code and making that code more secure. By Todd R. Weiss 
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The C++ development language has 
been used for years, but some of its best 
secrets are still buried, waiting to be 
discovered and implemented. These four 
books offer varying approaches to C++, 
from a beginner’s guidebook to more 
advanced books that teach developers 
how to better exploit the power, flex- 
ibility and security that lurks beneath 
the surface of C++. 


| how the libraries can be used to im- 
prove code and how to avoid common 
| problems. While the book glosses over 
the ether 46 Boost libraries with little 
more than brief descriptions, it breaks 
down the 12 most important ones into 
their essential elements to help you 
take advantage of the power of Boost. 


@ Effective C++ Third Edition: 55 Specific 





@ Secure Coding in C and C++, by Robert C. 
Seacord, Addison-Wesley, 2006, $39.99, 
341 pages. 
This guide 
to writing 
Secure Coding more-secure 
in C and C+4" code focuses 
on preventing 
§ fundamental 
i) programming 
errors that 
can lead to the 
most common 
and dangerous 
security vulnerabilities in C and C++ 
code. The book is filled with real-world 
examples, including detailed steps for 
preventing the buffer overflows and 
hacker attacks that are possible through 
the incorrect use of dynamic memory 
management functions. It also features 
sections on notable security vulner- 
abilities and their mitigation strategies, 
as well as information on practices 
that could help you improve your 
code writing. 


@ Beyond the C++ Standard Library: An Intro- 
duction to Boost, by Bjorn Karlsson, Ad- 
—_——— dison-Wesley, 
. 2005, $49.99, 
Beyond the 388 pages. 
This guide to 
the 58 Boost 
libraries that 
have been cre- 
ated to extend 
development 
capabilities for 
C++ develop- 
ers provides 
extremely detailed descriptions about 
the 12 Boost libraries that are most use- 
ful. The book covers a wide range of 
subjects, including numeric libraries, 
smart pointers, a preprocessor library 
and more. The sections on each of the 
featured libraries include details on 


Ways to Improve Your Programs and De- 
signs, by Scott Meyers, Addison-Wesley, 
2005, $44.99, 297 pages. This C++ guide 
offers insights into using C++ code ef- 
fectively to create efficient, portable and 
maintainable code for your software 
development projects. It includes 55 
ultradetailed suggestions for estab- 
lished developers for improving pro- 
grams written in C++ — it’s not a guide 
on to getting 
= started from 
Effective (‘+ the ground up 


ae Included are 
; clear descrip- 
| tions as well as 
kxamples and 
oints to re- 
member as you 
produce your 
code. Chapter 
topics include help with designs and 
declarations, inheritance and object- 
oriented design, generic programming, 
and :mplementations and templates. 


= C+ Without Fear, by Brian Overland, 
Prentice Hall, 2004, $24.99, 486 pages. 
This helpful guide starts with the 
basics, like programming how-to's 
and writing your first C++ programs, 
and it’s filled with clear illustrations 
and step-by-step examples. It’s a good 
book for beginners or nondevelopers 
who may want to know more about 
what’s under the hood of software, 
| but it could also help IT veterans who 
want to relearn 
some of the ba- 
sics. The book 
is presented 
in an easy-to- 
navigate for- 
mat that allows 
e reader to 
quickly find 
topics of inter- 
est. 





Third Edition in the language. | 





Corporate data centers account 
for more than 50% of the 
average company’s power costs. 


Let’s Change This: 


Server Facts: 


Sun Fire T1000 Dell 6850 


2x THE PERFORMANCE* 


3x THE CORES 
6 2 


24x MORE COMPUTE THREADS PER RACK 
960 40 


M%q THE SIZE 
1U 4U 
5 THE POWER CONSUMPTION 
300 Watts 1,470 Watts 


THE RIGHT ARCHITECTURE FOR YOUR 
WEB AND APPLICATION WORKLOADS 


1/3 THE PRICE 
$3,625 $11,575 


Maximize capacity with dramatic ener<y efficiency 


and amazing cost savings. 


t. Visit sun.com. 
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Rising to a Higher 
Standard Isn't Easy 


Our manager sees the need to implement 
two best practices: separation of duties, and 
the principle of least privilege. By C.J. Kelly 


OME EMPLOYEES are 
held to a higher stan- 
dard of behavior than 
most. Anyone ina 
position with broad powers or 
influence falls into this group, 
including accountants, manag- 
ers, systems administrators 
— and information security 
professionals. 

Like systems administra- 
tors, information security 
professionals gener- 
ally have access to a 
great deal of data and SECURITY 
information. Even if 
they don’t have direct 


know how to obtain it 

by exploiting a weak- 

ness (like hackers, but with the 
opposite intent) or by simply 
giving themselves elevated 
privileges. 

In our small shop, the sys- 
tems administrators, help desk 
workers and security people 
all have a great deal of access. 
This past week, some issues 
arose that caused me to go 
back to some best practices 
regarding access. One is called 
separation of duties, and the 
other is called the principle of 
least privilege. 


Raising the Bar 
It all started when a co-worker 
told me he suspected that one 
of my staffers was snooping 
around on employee comput- 
ers. Over the past year, I had 
heard similar complaints 
from various managers, but 
the staffers who had been 
the cause of those earlier con- 
cerns are no longer employed 
here, and I thought that it was 
a dead issue. 

However, I had failed to 
change processes so that such 
an issue couldn't arise again, 
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and if you set low standards, 
some people who don’t per- 
sonally have high standards 
wil] drop down to the lowest 
common denominator. It was 
time to raise the standards and 
change some processes so that 
the potential for abuse would 
be minimized. 

While much attention in the 
world of information security 
is given to technology, the 
most overlooked 
security risk is the 
level of access that 
systems and secu- 
rity people have on 
the network. 

In the IT world, 
you have to have 
gurus running around who 
can not only fix a network 
problem, but also troubleshoot 
issues that crop up with op- 
erating systems, databases 
or the application layer. The 
gurus have godlike status on 
the network, and that status 
demands integrity on their 
part. You have to be able to 
trust the people you open your 
network to. Once trust is lost, 
it’s game over. 

An audit trail is one way 
of finding out when trust is 
lost. There should also be 
an acceptable-use policy for 
systems administrators that’s 
published and enforced. Viola- 
tions of the policy should be 
punishable by termination. 

With a small team, address- 





ing separation of duties is a 
challenge. The purpose of 
separation of duties is to make 
sure that no single person can 
control a transaction or pro- 
cess from beginning to end. 
That’s a beautiful thing in the 
banking world. It’s not so hot 
in the IT world, where it’s very 
difficult to achieve pure sepa- 
ration of duties. 

Ideally, you want to make 
sure that the person who trou- 
bleshoots the desktop systems 
doesn’t have the same privi- 
leges as the person who man- 
ages the servers, the switches, 
the routers or the firewalls. In 
most cases, it isn’t feasible un- 
less you have a very large staff, 
among whom you can divvy 
up the myriad duties. 


Taking Action 

Turning to separation of duties, 
I first addressed our use of the 
administrator account. Before, 
staffers had permission to log 
into a server or to remotely 
administer a desktop using the 
administrator log-in. 

Now, each person must use 
his own account with adminis- 
trative privileges. This doesn’t 
change the level of privileges 
held by each staffer, but it 
does create an audit trail that 
specifically names the person 
who owns the account used, 
rather than providing a ge- 
neric log-in name. 

Second, the senior systems 
administrator reset the ad- 
ministrator password, wrote it 
down, locked it up and gave a 
key to only one other person. 
On pain of termination, the 
password is not to be given 
out. Of course, this could be 
a problem if any system ac- 
counts were running under 
the administrator account, 
since each of those accounts 
would have to have its pass- 
word reset as well. It’s a poor 
practice to bring up operat- 
ing system services under an 





administrator account, but it 
happens all the time. A better 
practice is to always create 
special system accounts with 
appropriate permissions for 
particular applications and 
services. 

Next, I told my staffers that 
they need permission from 
the end user prior to making a 
remote connection to a desk- 
top system. In fact, the end 
user must call the help desk 
and specifically request assis- 
tance. After the user’s request 
is made, the sysadmin must 
say to the end user something 
like, “I'd like to log into your 
desktop remotely to see if I 
can troubleshoot the problem 
for you. Is now a good time?” 
The exchange between ad- 
ministrator and end user must 
be documented in the help 
desk ticket. While this may 
not be a foolproof method for 
ensuring that administrators 
don’t abuse their privileges, it 
carries a message to them and 
creates an audit trail. 

The second best practice I 
set out to address is the prin- 
ciple of least privilege. Admin- 
istrators should have the least 
amount of privilege possible 
to get the job done. The log-in 
and password to the firewall 
should not be the same as 
those for the routers, the 
switches, any of the servers, 
the database, and on and on. 

I once performed a security 
assessment for a large compa- 
ny that had acquired a smaller 
one. My job was to assess the 
security of the acquisition be- 
fore the network connections 
were made. The network man- 
ager’s easily crackable log-in/ 
password combination was the 
one and only log-in/password 
to everything in the enterprise, 
including the firewall. 

In my current job, things 
aren’t that bad, but we’re 
working to make sure they’re 
as good as possible. » 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “C.J. Kelly,” whose name 
and employer have been disguised for 
obvious reasons. Contact her at mscjkelly@ 
yahoo.com, or join the discussion in our 





forum: computerworld.com/forums 


To find a complete archive of our Security 
Manager's Journals, go online to 
computerworld.com/secjournal 
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ID Management 
Application Updated 
« Beia Systems Software AG has 
unveiled Version 4 of its SAM 
Jupiter enterprise identity man- 
agement application. According 
to the Berlin-based vendor, the 
new version is easier to custom- 
ize than previous ones, and it 
can run on Unix or Windows sys- 
tems in addition to mainframe 
platforms such as z/OS. It also 
features a pure Java business 
server infrastructure and an ex- 
tended graphical user interface 
for managing system utilities. 
Available now, SAM Jupiter is 
priced at about $110,000 for a 
3,000-user installation. 


Sun Eyes Health 


Care ID Integration 

2 Sun Microsystems Inc. has 
announced the availability of 
iProvider Global identifier, an 
application-based services of- 
fering designed to support more- 
efficient management of informa- 
tion about health care providers. 
Based on Sun’s Java Integration 
Suite, iProvider Global Identifier 
is intended to make it possible 

to integrate multiple provider ID 
numbers stored in various for- 
mats across disparate health care 
systems and then match them 

to a common industry-standard 
format known as the National 
Provider Index. 


Content Delivery 
Software Upgraded 

® Stratacache Inc. has in- 
troduced Version 3.0 of its 
OmniCast content distribution 
software, which is designed to 
distribute data, software and vid- 
eo files to hundreds of thousands 
of locations simultaneously. New 
features include TCP support for 
public or private networks and 
the ability to handle files of up 

to 1TB. The latest version also 
allows users to include Windows 
file-system security controls in 
the files they distribute. Omni- 
Cast 3.0 starts at $35,000 for 
the server software plus $1,000 
per remote site. It will be avail- 
able on Jan. 16, according to the 
Dayton, Ohio-based vendor. 


CURT A. MONASH 


The Diskless 
PC Revolution 


ERSONAL computers have changed dramati- 
cally over the past two decades, but one ele- 
ment has remained constant: processing pow- 
er, device connectivity and fixed storage have 
all been combined in one central engine. 

Whether you're using a handheld, laptop or desktop 
device, the data and software reside in the system itself, 
or they live on a server somewhere else in the network 
cloud, but they’re all in the same place. 


But that constant may 
change. Thanks to flash 
memory, it may soon be 
practical to have all of 
your data, plus most of 
your software, sitting con- 
veniently in your pocket. 
When that happens, con- 
sumer and business com- 
puting alike could change 
significantly. 

Here’s how the basic 
hardware setup could de- 
velop: Instead of relying 
on fixed disks, PCs would 
have ports for two to four 
or more flash drives. One or two would 
hold the operating system and most of 
the programs. The others would be fo- 
cused mainly or entirely on data. And 
these flash drives would be portable 
from system to system, although there 
might be a partial exception for small 
devices such as cell phones, cameras, 
personal organizers or music players. 
But even if they kept a little onboard 
storage, it could be loaded from and 
backed up to a flash drive fitting into 
at least one port. 

This concept has one huge differ- 
ence from most other diskless PC 
plans: Rather than all living on a big 
server in the cloud, your personal data 
(and software) would never leave your 
custody. Thus, issues of network reli- 
ability, service provider lock-in, ser- 
vice-provider privacy safeguards and 
so on would all be mitigated. What’s 
more, migration is almost a nonissue; 
older fixed-disk computers with USB 


consultant in Acton, Mass. 
curtmonash@monash.com. 





ports fit into that diskless 
world perfectly weil. 

I love the hardware 
implications of this idea. 
First of all — continuing 
the theme of last month’s 
column (“Managing Data 
at RAM Speed,” Nov. 14) 
— every PC would benefit 
from huge improvements 
in memory-access speed. 
Beyond that, banishing the 
disk would slash laptop 
power requirements, and 
that means a huge overall 
weight reduction. And like 
other ideas about diskless PCs, this 
one would make it more affordable to 
optimize monitors, signal processors 
and the like for particular kinds of ap- 
plications and room environments. 

One loser from this change could 
be Microsoft. The price per gigabyte 
would increase, so bloatware would be 
harder to tolerate. Restrictive licens- 
ing practices might not fit well, either. 
But otherwise, software would benefit. 
In particular, voice recognition could 
become more practical, because you 
could port the training you’ve done of 
the system from device to device. The 
same goes for handwriting recognition 
and other customizations. 

In particular, improving “disk” speed 
on PCs by multiple orders of magni- 
tude could have all sorts of favorable 
consequences. Object file systems and 
full-PC search could be much more us- 
able. Autosave would work better, and 
PCs wouldn’t freeze as frequently as a 





result of browser cache thrashing. And 
as far as security permissions are con- 
cerned, anybody from number crunch- 
ers to engineering professionals could 

work efficiently on huge, personalized 

data sets. 

Ah, yes — security. Without the 
disk-access bottleneck, it would be- 
come reasonable to encrypt or decrypt 
a PC’s entire database each time you 
logged off or on. No more security 
breaches from stolen laptops — or, 
rather, from picked pockets and busted 
lockboxes, since it would no longer be 
a good practice to store the data with a 
thief-attracting laptop at all. 

In another security-related area, 
two-factor authentication would also 
be easier, since the flash drive itself 
becomes the “thing you have,” rather 
than a smart card or an RSA-style 
clicker device. 

Meanwhile, one objection that’s been 
raised to this idea is, in my opinion, 
somewhat bogus. Yes, badly protected 
diskless machines aren't really secure; 
at least theoretically, they’re vulnera- 
ble to “man in the middle” attacks. And 
perhaps that’s an argument for contin- 
ued use of laptops and against the idea 
of terminals in every hotel room — a!- 
though if you fear that kind of attack, 
why not fear spy cameras and audio 
bugs as well? But in any case, it’s not a 
persuasive argument against corporate 
or home deployments. If your janitors 
can’t be trusted, traditional PCs are at 
least as vulnerable as diskless ones. 

Diskless PCs are too futuristic to 
figure into most current IT plans, al- 
though they do provide another reason 
to move away from Microsoft desktops 
(indeed, their support for dual booting 
will eventually smooth such a transi- 
tion). But it’s interesting to think about 
them now. If you want to pursue the 
subject further, you can find more 
thoughts and links on the subject on my 
Web site at www.monashreport.com. » 


WANT OUR OPINION? 


For more columns and links to our archives go to: 
www.computerworld.com/columns 
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Some CIOs say that the IT group , | ss reports are essential tools for It’s Time to Invest in Leadership 
that plays together stays together | tracking IT initiatives, but if the writers | As baby boomers near retirement, more IT 
— and achieves better results along and readers aren’t in sync, such reports can | groups are beginning to wonder about their 
the way. Here’s how to inject some | be hit-or-miss exercises for all involved. bench strength. Developing new leaders 
levity into your workplace for fun | IT leaders on the receiving end talk about | takes planning and effort, says Paul Glen, 
and profit. PAGE 44 y | what makes for a great read. PAGE 45 | and the time to begin is now. PAGE 4 


By Kathy Chin Leong 


EN JOHN BARBANO moved up the management ranks to | 
assumed the position vice president and CIO for J&J’s largest | 
of CIO at Johnson & business segment, pharmaceutical re- 
Johnson Network Com- search and development. (The pharma- 

puter Services, he did all he could to ceutical arm stretches across six R&D 
learn about the companies world- 
$47.3 billion parent wide.) Once in that 
company, Johnson Af can come to role, he initiated a 
& Johnson, which Salsa ltsiseelalel deeper educational 
develops pharma- : : process. 
ceuticals, medical ToT cane) UelaSy “My own learn- 
devices and con- whereas before, als) used ing was accelerated 
sumer products. to tell us what they thought through special 

| 


Since Barbano’s the solution should be. projects, spending 


previous CIO ex- time with scientists 
perience was in Rey Ul) tL A and clinicians, see- 


> ROUSE Ss is teem CM Ce Mme MUM UCM air cite em ett ia 


financial services pty howe ing how they do Barbano represents the new wave of | career success. 

at Merrill Lynch & ce ‘ drug discovery and | IT professionals who initiate hands-on As they think outside the computer 
Co., he immediately development, lis- experiences to understand the nuts box, they become specialists in mar- 
began studying the inner workings of tening to their challenges,” he says. “I and bolts of what it takes to create a keting, R&D, sales and other company 
the New Brunswick, N.J., conglomerate | also make a point to keep up with the product or serve a customer. By im- functions. “Businesses are turning to 
and its product lines. Approximately industry by reading books, attending mersing themselves in business, they | the IT departments and saying, “We 
15 months later, in February 2004, he select conferences and reading white boost company success while building | need new ways of reaching customers 


papers about vendor solutions.” | the trust and credibility that leads to 
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and want to build products in a more 
efficient way,” says Mark Gilfand, in- 
coming president of the Association of 
Intormation Technology Professionals 
in Chicago. 

As companies reorganize and merge, 
corporations are purposely strengthen- 
ing the ties between IT and core busi- 
ness, and the changes provide an op- 
portunity for IT executives to reshape 
departments and retrain staffs. 

Hence, IT departments are no lon- 
ger order takers. “We can come to 
scientists and end users with solutions, 
whereas before, they used to tell us 
what they thought the solution should 
be,” Barbano says. “We can say, ‘Here’s 
what we think we should be delivering 
in terms of technology-driven business 
solutions.’ ” 


A Scientific Bent 


Centocor Research and Develop- 

ment Inc. in Horsham, Pa., is a J&J 
pharmaceutical company that creates 
medicines to reduce symptoms of auto- 
immune diseases such as rheumatoid 
arthritis. It’s not uncommon for the 

IT staff to work in close proximity to 
scientists and their laboratories. And 
technology staffers often come through 
the IT door with science backgrounds 
that come in handy when they are put 
to work on biochemistry projects. 

Eric Perakslis, CIO at Centocor R&D, 
was already interested in the scientific 
component of the industry when he 
took the job. Now he’s completing a 
Ph.D. in biochemical engineering. 

In all phases of drug development, 
IT’s role has become increasingly 
crucial. IT staffers working on data 
warehousing collaborate with drug 
discovery scientists to gain access to 
structured and unstructured databases 
in the most efficient way possible, says 
Barbano. “These scientists are more 
productive now,” he says, “and we, 
together in partnership, are able to de- 
liver significant value.” 

As the competition gets stiffer in a 
global market, the IT division must 
share the company’s vision and under- 
stand how it fits into that vision. 

That relationship isn’t always as 
clear as it needs to be, as Gil Urban dis- 
covered at Whirlpool Corp. Urban is 
the assistant CIO responsible for staff 
development and internal IT opera- 
tions at the $13 billion maker of home 
appliances in Benton Harbor, Mich. 

“We got feedback that the IT staff 
was not all that clear what our mission 
was to the rest of the company,” he 
says. So this year, his team in Whirl- 
pool’s Global Information Systems 
(GIS) unit created a DVD to state the 











MANAGEMENT 


goals of the 400-to-600-employee IT 
organization. 

Then GIS launched a series of work- 
shops worldwide, showing IT employ- 
ees the DVD and discussing how their 
roles helped fulfill Whirlpool’s goals. 

“We wanted to help our organization 
see what our purpose is, and also we 
wanted to engage them in the discus- 
sion and grow our people and their ca- 
pabilities through this,” Urban says. 

“We [in GIS] want to create new 
business capabilities for Whirlpool, but 
we have to be clearly connected to the 
business to get the right pulse,” he says. 
“We have to see the company both re- 
gionally and globally. Now we have a 
framework.” 

Unlike five years ago, when IT 
managers sat together at Whirlpool 
headquarters, today they are dispersed 
among the major business units. They 
participate in senior business meetings, 
review plans and strategize with busi- 
ness leaders. As management discusses 
new product plans for the Whirlpool 
line, shipping and delivery needs, and 
quality control, IT executives’ voices 
are heard, Urban says. 

Marriott International Inc. also 
recently produced an IT-related DVD 
Called “Technology: Shaping and En- 
abling Our Business,” its purpose is to 
educate hotel franchisees and business 
partners worldwide about the Wash- 
ington-based company’s technology 
initiatives and direction. It’s also being 
shown to Marriott’s 1,350 technology 
associates to emphasize how the de- 
partment fits into the rest of the orga- 
nization. 


Into the Field 


Top managers at Marriott and Whirl- 
pool believe that their staffers will bet- 
ter understand the breadth and depth 
of the organization by going into the 
field with the business people. New IT 
managers in Marriott’s Information 
Resources (IR) Field Services organi- 
zation must work in one of the com- 
pany’s hotels for a week. They shadow 
people in various business functions 
such as sales, the front desk, engineer- 
ing, food services and housekeeping. 

“New associates get a real taste of 
what it’s like to have to work and man- 
age these different areas, and it helps 
them understand how technology 
makes the functions more cost-effec- 
tive and efficient,” says Wendell Fox, 
senior vice president of North Ameri- 
can IR Field Services. 

At Whirlpool, every IT person is 
encouraged to tour manufacturing fa- 
cilities or ride in a service truck — not 
just once but on a recurring basis. “Ev- 
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TRAINING 


Tips for getting seri- 
ous about business: 


@ Jake advantage of reorgani- 
Zations to tighten communica- 
tion among IT, upper manage- 
ment and all departments. 


@ Encourage staffers to at- 
tend nontechnical industry 
conferences, and read books 
and periodicals related to the 
company’s business. 


@ Review the company's core 
values; make sure IT knows 
where it fits into the strategic 


&i =ducate IT staffers in general 
business principles. 


@ Encourage lT staffers to visit 
business people in the field. 


@ Host informal meetings with 
people in other departments 
to talk about what they do and 
what they need from IT. 


@ Locate !T managers and 
Staffers close to the depart- 
ments they serve. 


@ Dont just take orders. Figure 
out where technology can help 
solve a business problem, or 
spearhead a new initiative. 


- KATHY CHIN LEONG 
eryone needs to be understanding the 
needs of our customers,” says Urban. 

Urban recently demonstrated the 
importance of this kind of immersion 
when he sat in on a telephone service 
call at one of the call centers. 

“T was listening to the customer expe- 
rience, and it seemed that there was a 
lot of wait time,” he says. “I went to the 
IS group and told them our call center 
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needed performance improvements. 
It’s ad hoc experiences like these that 
give us a better handle on the way 
business is really being done.” 


Down to Brass Tacks 

Sales and marketing staffers aren’t the 
only ones concerned about competi- 
tion at Whirlpool; the entire company 
gets involved in understanding the 
household appliance arena. 

Once a month, the IT department 
holds town hall meetings to discuss 
the competition. And during bimonthly 
staff meetings, various IT groups 
go over corporate results, taking the 
time to cover financial concepts such 
as earnings per share. “So far, people 
have been really receptive to this,” says 
Urban. 

IT and business are connecting in 
the media world as well. John Eck is 
president and CIO at the new Media 
Works division at NBC Universal Inc. 
in New York. Charged with taking 
care of traditional IT services, Media 
Works is responsible for all the tech- 
nology that occurs behind the lens, 
from audio and video to preproduction 
to postproduction film editing. Any 
type of media transmission, from satel- 
lite link to Internet services to HDTV 
technology, falls to Media Works. The 
division also handles anything to do 
with technical and networking infra- 
structure. With an international staff 
of 3,000 full-time employees, Eck es- 
timates that the division is juggling at 
least 50 major technology projects. 

Media Works IT employees are 
encouraged to be a part of the TV proc- 
ess. They can take time to explore how 
programs like the Today show or the 
NBC Nightly News is produced and ed- 
ited. Once a month, the company hosts 
Media Works University, “where you 
can get closer to the writers and actors 
and see how a program is put together,” 
Eck says. “You can see how Saturday 
Night Live is produced, and how our 
commercials, on-air promotions and 
programs are integrated.” 

When IT professionals understand 
the business, it’s not just good for the 
company, it’s also good for their ca- 
reers. Gilfand, who is a staff assistant 


| in systems at State Farm Insurance Co. 


in Bloomington, Ill., has earned three 
insurance certifications. “I did it to un- 
derstand the business, and that raised 
my personal stock,” he says. “That is 
key for IT professionals — to find ways 
to differentiate themselves.” » 





Leong is a freelance writer in Sunnyvale, 
Calif. Contact her at kchinleong@ 
sbcglobal.net. 
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IBM eServer xSeries 226 Express IBM eServer xSeries 346 Express IBM eServer xSeries 260 Express // | \BMeServer BladeCenter HS20 Express 


An entry-level 2-way server that Help maximize performance and _ IBM's newest third-generation _.| Offers extreme flexibility and 
offers the reliability and improve availability in a rack Enterprise X-Architecture* <| scalability, plus it helps to 
performance needed for day-to- dense environment with server. Designed for companies LU consolidate and simplify your 
day computing. Easy to set up Xtended Design Architecture” looking for database, e-mail, infrastructure. Helps reduce 
and deploy, with access to all Includes Calibrated Vectored Web/e-commerce or consolidated power consumption and save 
major system components. Cooling, an IBM innovation that application serving. valuable floor space. 


helps increase uptime. 
: : System features System features 


Up to four 64-bit Intel® Xeon™ 
Processors MP, up to 3.66GHz 


System features 
System features 


Up to two Intel” Xeon™ 
f 
t 


-rocessors 3.20GH2/2MB 


Ut ¢ 

3 OMB ; a 

3GHz/2ME Up to two Intel® Xeor 
Processors 3GHz/2MB Four-way tower or 7U rack 


+ ; capabili 
Two-way 2U rack server capability 


Up to 16GB DDR2 memory Up to 3.6TB hot-swappable 
using 8 DIMM slots with SAS (serial attach SCSI) 
enhanced memory hard disk storage 
Limited warranty Up to 64GB of memory with 
3 years on-site advanced memory protection $2 g99'* 
i ’ 


Limited warranty: 3 years on-site ; . 
$1,639** $3,315" (Other configurations as low as $1,669) 


(Other configurations as low as $1,229) 4 
(Other configurations as low as $2,219) $5,399 


IBM Financing Advantage ea Rice ashen ae (Other configurations as low as $4,599) $81 


IBM Financing Advantage 


BM Financing Advantags 


$151 


IBM TotalStorage DS300 Express System features 


This entry-level, cost-effective iSCSI host- 3U rack mount entry-leve Starts at 584GB 

attached storage system utilizes your existing with two ¢ llers scales to 4.2TB' 

network infrastructure to deliver advanced Support for up to 1 Limited warranty: 1 year 

functionality. Provides an exceptional SAN Ultra320 i disk 2S on-site 

storage solution with xSeries servers for 

e-mail/file/print. $6,455** IBM Financiag Advantage 
(Other configurations as low as $2,995) $180 





USED TO SAYING: 
UNDER CONTROL’ 


IBM Express Servers and Storage™ for mid-sized business. 
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systems more efficiently. Packing more servers into a single rack. Helping to 
Save space, energy, money. 


With IBM Express, innovation comes standard. That's true for servers, storage 
and printers. Your local IBM Business Partner can tell you more. And remember, 
you can keep your technology current while helping to reduce costs — through 
IBM Global Financing. 


Excited? No need to control yourself. Get started today. 


Nn 


Save time. Save costs. Save the day! (Optimize your I.T.) 
ibm.com/systems/innovate1 
1 800-IBM-7777 


IBM TotalStorage DS400 Express System features 


Exceptional entry-level solution for workgroup 
storage needs. With advanced functionality, 
the DS400 supports xSeries servers and 
utilizes hot-swap Ultra320 SCSI drives for 
high reliability. 


$8,495°* 


(Other configurations as low as $4,995) 
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BY MATT HAMBLEN 

AVE YOU heard the one about the CIO who 

made work so much fun that the IT staff 

actually wanted to show up every day? 

Well, it’s no joke. In fact, rising above 

the deadly seriousness that pervades many IT shops 
these days are several CIOs who are veteran fun- 
makers. They say their shenanigans have improved 
morale, retention and, by golly, even the IT services 
they offer and the businesses they serve. 

If you think life in IT seems distinctly more seri- 
ous than it was a decade ago, you're not alone. David 
Horth, a consultant at the Center for Creative Leader- 
ship in Greensboro, N.C., blames the lack of levity on 
the widely held perception that “being busy equals 
good work.” But quite the opposite is true, he says. 

Others blame it on the recession that dragged on 
too long or even the lingering pain of the Sept. ll, 
2001, terrorist attacks. But Dale Sanders, a CIO de- 
voted to bringing fun into the workplace, points to 
political correctness. “We seem to have washed our- 
selves clean of the value of diversity in culture and 
humor,” says Sanders, who heads IT at Northwestern 
Medical Faculty Foundation Inc. in Chicago. 

Sanders also cites the fear factor. “There’s so much 
pressure in American culture to improve,” he says. 

“That pressure causes fear, which excludes humor.” 

There’s too much focus on the wrong things, he 
adds. “Of all the metrics we fret over in business these 
days, the most important is the laugh metric,” Sand- 
ers says. “You can predict the outcome of a business 
by observing the number of times people laugh in the 
workplace. You can predict a successful business if 
you can hear heartfelt laughter 10 to 12 times a day.” 


“ 


Sanders says he has “an 


| obligation as a leader to add 
; some value to people’s lives.” 


One way to do that, he says, 
is through humor. “If people 


| are laughing here at work, 


they will take it home to their 
husbands and wives,” Sand- 
ers adds. “You can make life 
nightmarish for people — or 


meaningful.” 


Other IT leaders feel the 
same way, and they say their 
efforts have made a difference. 
John Wade, CIO at Saint Luke’s 
Health System Inc. in Kansas 
City, Mo., suspects that his 
efforts to make work fun for 
the IT staff are responsible 
for holding the turnover rate 
among his staffers to about 3% 
over his lifetime as a manager. 

And Michael Carper, divi- 
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sees the value of humor. “A 
sense of humor will get you 
through just about anything,” 
he says, “because it diffuses 
political situations, and ev- 
erybody knows there’s a lot of 
politics and angst when you're 
working in IT.” 

So, how do you build fun 
into an IT shop? “You can’t 
suddenly say your group is 
starting today to have fun,” 
Sanders says. “It has to be 
ingrained in the organization, 
or it won't work.” That means 
that having a fun workplace 
starts at the top, he says. To 
give folks a chuckle, Sand- 
ers has posted photos on the 
intranet of staffers caught in 
awkward moments installing 
cables or servers, for instance. 
Sanders encourages others to 


sional vice president of technology operations at re- 
tailer Coldwater Creek Inc. in Sandpoint, Idaho, says 
lightening up the workplace has “absolutely” made 

a difference. Part of that difference may be loyalty. 
Carper says that a handful of people who work for 
him now have moved with him from company to 
company. “They come from San Francisco, Seattle, 
Chicago, Indianapolis, Atlanta and other places to 
work on my team because this is a fun and rewarding 
team to work on,” Carper says. 

In an environment where there’s fun, teamwork 
flourishes and workers recommend the company to 
their friends, aiding recruitment efforts, Carper says. 
Without fun, it’s difficult to build the kind of cohesion 
often required in IT projects, and “you can bet your 
retention rate is in trouble and you won't be as suc- 
cessful in recruiting team-oriented employees with 
good customer service skills,” he says. 

David Foote, president of Foote Partners LLC in 
New Canaan, Conn., studies workplace issues and 





add funny (and tasteful) captions. 

At St. Luke’s, few holidays go by without some kind 
of party. At one, Wade dressed in drag for a laugh. IT 
employees echo the levity; it’s not unusual to see peo- 
ple wear cheese heads or feather headdresses to work. 


| An air of humor pervades Wade’s quarterly planning 


meetings. At one recently, a staffer joked about Wade’s 
reputation for penny-pinching by presenting a mock- 
up of a $1 billion bill with Wade’s face on it. 

But it doesn’t have to be about belly laughs. Carper 
makes it clear that his open-door policy allows 
people to come in and talk about sports, travel or 
their hobbies as well as work. And Wade encouraged 
a worker who wanted to form a “get healthy” group 
that takes walks together and has set up informal 
basketball games. The cost to the organization was 
minimal, he notes. “What does it cost to have some 
fun? Nothing,” Wade says. “But what is the benefit? 
It’s a happier workforce, which means less turnover, 
which benefits customers.” ? 


Ae 





THE SHACKLES OF SERIOUSNESS 
won't break overnight, but infusing 
some fun into the workday can get 
things rolling and it can take on a life 
of its own. Here are some sugges- 
tions for lightening up from the less 
dour among us. 


LAUGH AT YOURSELF 

Having a workplace that's fun starts with the 
manager in charge. “You have to have a sense 
of humor about yourself and laugh at yourself 
in the company of those you lead,” says Dale 
Sanders, CiO at Northwestern Medical Faculty 
Foundation. 


HIRE FOR HUMOR 

Sanders asks job candidates to name their 
favorite comedian, comic strip or funny movie, 
and he asks himself if this is a person he'd like 
to sit next to on a coast-to-coast flight. 


SMILE - OFTEN 

To set the right tone in a workplace, “it's abso- 
lutely critical” that the person in charge “smiles 
more often than they frown,” says Michael 
Carper, divisional vice president of technology 
operations at retailer Coldwater Creek. 


ENCOURAGE 

“SERIOUS PLAY’ 

“Get workers to take an excursion, even for a 
moment, away from the serious work at hand,” 
says David Horth, a consultant at the Center for 
Creative Leadership. Depending on the person, 
that might mean an hour of yoga at lunch or 
three minutes of playing a favorite instrument 
at the start of a meeting. 


LOOK FOR 
OPPORTUNITIES 

There are “a hundred ways to lighten up and 
have fun” every day, says John Wade, CIO at 


Saint Luke's Health System. “A party is always 
good.” 


ENCOURAGE 
SELF-EXPRESSION 

Sanders encourages workers to “highly per- 
sonalize” their work spaces to warm up the 
environment. 


REWARD 

FUN-MAKERS 

Carper makes a point to recognize people 
who create workplace fun, and he ties the fun 
to improved productivity. 


CHILL OUT 

Start the day by chatting with colleagues 
instead of madly stressing over e-mails, 
Horth says. It might lead to more creative 
approaches to work. 


~ MATT HAMBLEN 
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How to 


write a 


N ANY given month, Sue Schade 
sees 20 to 30 progress reports, and 
she needs to digest the informa- 
tion as quickly as possible. 

Schade, CIO at Brigham and Wom- 
en’s Hospital in Boston, knows what she 
wants to see and how she wants to see it, 
and she makes her expectations crystal 
clear to those who report to her. 

She expects to know what has been 
accomplished, which key decisions have 
been made, what’s going on now, what’s 
on the horizon and which issues are in 
play. She also wants to know whether 
projects are on track to meet their origi- 
nal deadlines. And she wants it all in a 
standard format. 

“My folks know what they have to 
put in,” Schade says. “I don’t want to 
look at a lot of different formats and ask, 
“Where’s this? Where’s that?’ ” 

Progress reports are essential tools 
for tracking projects and initiatives, but 
if the writers and readers aren’t in sync, 
reports can be hit-or-miss exercises for 
everyone involved. 


Even when higher-ups expect detailed 
reports, some items shouldn't make the 
final cut. Here are a few: 





veryone does it, but few do 
it well. Here's how. 


Here are some tips on how to deliver | 
the right information to the right people 
at the right time. 


Set Expectations 
Different people want different kinds 

of reports. One CIO might want a page | 
of narrative, while another might want 
“a set of graphs and two bullet points,” 
says Kevin Doyle. 

“It depends on the situation, what the 
receiver is comfortable receiving and 
how you can best communicate with 
him,” says Doyle, an associate professor 
of business administration at Benedic- 
tine University in Lisle, Ill. 

Doyle, who has overseen corporate 
IT initiatives, says project managers 
should establish expectations at the 
start by determining who will get re- 
ports, how often and in what form. 

Jason Fortier, director of the CRM 
service line at Adjoined Consulting Inc. 
in Miami, agrees. He’s currently work- 
ing with one company on a project that 
affects five business units, so he built a 
report template early on, shared it with 
division leaders and asked each whether | 
he’d need anything else in the reports. 

Fortier says a project’s size, scope and | 
phase help determine the frequency of 
reports. Projects in the analysis phase, 
for example, don’t require weekly re- 
ports, but initiatives in the middle of 
implementation usually do, he says. 


Nail Down the Essentials 

It’s up to you as project manager to find 
out what executives want in progress 
reports. When Rosalee Hermens reads 
a report, for example, she wants to see 
updates on the technology, finances, 
schedule, design and management, and 
she wants to compare those items over 





time. “I want to see those exact same 
things evaluated every week,” says 
Hermens, principal at Hermens & As- 
sociates, an IT management consulting 
firm in Newton, Mass. 

Former CIO Rick Swanborg, now 
a professor at the Boston University 
School of Management and president 
of Icex Inc., a Boston research and con- 
tent management firm, says he wants 
to know what has been done and what 
needs to be done, how much time that 
will take, which issues remain and how 
they are being resolved. He also wants a 
qualitative assessment of the project. 


44 i don’t want 
to look at 

a lot of different 
formats and ask, 


| ‘Where’s this? 


Where’s that?’ 


SUE SCHADE, CIO, 
BRIGHAM AND WOMEN’S HOSPITAL, BOSTON 


More-sophisticated reports will 
also include information about risks, 
including details on how the team is 
mitigating them and how the risks are 
changing, Swanborg says. For example, 
a hospital IT department installing tab- 
let PCs might list insecure data as a risk 
early on. But as staff addresses that risk, 
another one — perhaps the possibility 
that a vendor could go out of business 
— may take its place. 

Comprehensive reports may include 
information about the talent pool, too. 


| “How am I going to make sure I retain 


my people in the project or get the 


resources I need when I need them?” 
Swanborg says. For example, the com- 
pany may have 20 projects that need 
database managers at some point. If 
those managers get hung up on one 
project, it’s important to determine 
how it will affect the schedule. 
Similarly, some progress reports 
should include relevant information 
about other projects. The hospital tablet 
PC project, for instance, may depend 
on successful implementation of file 
management software. Project manag- 
| ers should include a line on how such 
| ancillary initiatives are progressing and 
| whether the schedules mesh. 
| Good status reports can highlight 
early-stage problems, required changes 
| and areas that need improvement be- 
| fore any of those reach the crisis stage. 
| “You're really looking at status reports 
[as a way] to improve your ability to de- 
liver services,” Swanborg says. 


| Keep It Simple 

| Many managers say that the best 
reports don’t exceed one page and 

| go light on narrative and heavy on 

| graphics that clearly show progress 

and problems. Hermens looks for color- 

coded updates on key points. The col- 

| ors — green, yellow and red — loosely 

| correspond to “going fine,” “needs at- 


| tention” and “problematic.” 





| Fine-tune to Your Audience 
| Good progress reports balance sum- 
maries and detailed analysis in a way 
that works best for the people receiv- 
ing them. Andrew Galbus, an IT man- 
ager at a large Minnesota health care 
institution, suggests that you give the 
level of detail that most people would 
accept as enough but be prepared to 
answer questions that might arise. 
And don’t assume you know what 
| your audience wants; ask them. 





| Know Your Media 

Finally, check on the preferred method 
| of delivery. Some managers may want 
updates via e-mail, others may be more 
| comfortable with paper reports, and 
| some may prefer a conversation. » 
| Pratt isa Computerworld contributing 
| writer in Waltham, Mass. Contact her at 
| marykpratt@verizon.net. 
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QUICK HITS 


A View From 
The East 


What is the outlook for 
your industry over the 
next 12 months? 


Extremely 
challenging 


14% Very good 


NOTE: Percentages may not equal 
100 because of rounding 


BASE: 413 Asia-Pacific executives 


“Association of Southeast Asian Nations 
BASE: 389 executives at 
Which of the following 
are likely to become 
major themes in the 
next 12 months? 


= Base: 70017 decision-makers at Asia-Pacific 
companies; multiple responses allowed. 
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Its lime to Invest 
In Leadership 


I’S definitely coming. I’m starting to hear the 


whispers, the talk. It reminds me of the days when 


we were discussing Y2k but not yet doing any- 


thing about it. 


Do you remember? It started with a buzz around 
the water cooler. “You know that this thing won’t work 
when we get to the year 2000. In the ’60s, the program- 
mers decided to save a few bytes by assuming the 19 
at the start of the year field — no one thought that this 
stuff would be used for so long. We’re not even sure that 
we have the source code. Someone’s going to have to do 
something about that someday before it’s too late.” 


Well, I’m starting to hear 
the same sort of buzz, 
although this time, it’s not 
about the software, it’s 
about the people. 

“Have you noticed that 
most of our managers 
and executives are about 
the same age? They’re all 
baby boomers, and they’re 
going to start to retire in 
the next few years. We're 
not sure that we have 
the managerial bench 
strength to fill these roles. 
Somebody’s going to have 
to do something about that 
someday before it’s too 
late.” 

Soon, we are going to have to start 
preparing the next generation of tech- 
nical leaders to accept responsibility, 
to carry forward. But so far, not too 
much is happening. I sense that this 
is the year when many organizations 
are going to start getting serious 
about planning for this inevitability. 

But this time, as opposed to the 
Y2k event, legions of consultants, 
contractors and outsourcers won't 
solve the problem. If you want new 
and effective leaders, you will need to 
grow your own. It will become a tight 


book Leading Geeks. Contact 
him at info@pauigien.com. 





market for buying talent, 
and the talent you’re able 
to buy won’t come with 
loyalty. 

This leads us to several 
important questions. Can 
you do anything to grow 
new leaders? Can leader- 
ship be taught? Can it be 
learned? If so, how? 

Of course, there are 
legions of classes being 
offered on “leadership 
skills.” But a five-day 
class, a personality inven- 
tory and a 360-degree 
evaluation will not incul- 
cate the depth required to 
guide a smart, dedicated and, frankly, 
difficult technical staff. 

In her new book, Leadership Can 
Be Taught (Harvard Business School 
Press, 2005), Sharon Daloz Parks cap- 
tures the dynamic and difficult nature 
of guiding people to learn to lead. As 
part of her treatise, she documents 
the teaching of Ronald Heifetz of 
Harvard’s Kennedy School of Govern- 
ment, who has been evolving an effec- 
tive approach for nearly two decades. 
The course he teaches is built around 
his book Leadership Without Easy An- 
swers (Belknap Press, 1994). 





The observations of both Daloz 
Parks and Heifetz resonate with my 
own thoughts about what it takes to 
learn to lead. Here are a few key ideas 
that you should consider if you plan to 
grow your own leaders. 

Leadership lessons are best learned by 
reflecting on personal experiences and 
integrating that insight with theory. Just 
reading a book won’t make anyone a 
great leader. But just looking in the 
mirror is an equally hollow basis for 
learning. 

Reflection requires a small learning 
community. This kind of learning re- 
quires deep thinking and personal 
honesty. This sort of developmental 
work is usually wrenchingly emotion- 
al and difficult. No pain, no gain. And 
it is best done in small groups of peers 
who have built a sense of mutual trust 
that makes it possible for them to be 
open with one another. 

Leadership is best learned by midcareer 
professionals. While we may like the 
image of the young, energetic, natu- 
ral leader, in the real world, learning 
from experience requires having 
enough experience to learn from. 
Without what Daloz Parks and Heif- 
etz call “grist for the mill,” a potential 
leader’s understanding and insight are 
likely to be shallow at best. 

Learning to lead requires extended en- 
gagement, not a quick fix. No one learns 
to lead at a boot camp. Leadership is 
about much more than skills. Learn- 
ing leadership transforms the mind of 
the leader. Changing minds requires 
time and attention. It’s not an over- 
night transformation. 

It’s time that we in the technical 
industry begin to pick ourselves up 
from the pain of the past few years 
and start looking ahead. It’s time to 
stop whispering about the coming 
leadership gap and start investing in 
our future. D 


For more columns and links to our archives go to: 
www.computerworld.com/columns 





Simplify your |.T. and your business. IBM servers and storage are designed to 
help you do just that. Take the IBM TotalStorage” DS4100 Express with DACstore. 
It can help you reconfigure or add capacity while staying up and running. 
No need to stop to reset drives. 


Because with IBM Express, innovation comes standard. That's true for servers, 
storage and printers. What's more, you can keep your technologies current 
while helping to reduce costs — through IBM Global Financing. 


All things considered, an I.T. hero deserves nothing less. 


MEET 3 HEROES IN THE BATTLE AGAINST 1.T. COMPLEXITY. 
YOU'RE THE 4TH. 


IBM TotalStorage DS4100 Express 


$7,349* 


(Other configurations as low as $6,599) 


IBM Financing Advantage 


$206 


IBM eServer OpenPower 720 Express IBM TotalStorage 3580 Express 


$9,774" : a 1 800-IBM-7777 


$164 


$5,850* 


$273 
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Senior Systems Analyst: 
Work with team to devel- 
op new Child Support 
Enforcement system for 
various states; Long term 
travel may be required to 
different states as pro- 
jects are contracted for 
and completed. Send 
resume to ATTN: 0802- 
04, Computer Systems 
Consulting, Inc., 4030 
Wake Forest Rd., Ste. 
300, Raleigh, NC 27609 


Computer Professional 
NJ based IT firm 

Sr. Level Positions, 1T Manager, 
MiS Manager, ITS Director 
needed to plan, direct, or coordi- 
nate activities in such fields as 
electronic data processing, infor- 
mation sys, sys analysis & comp 
programming 

Jr. Levei Positions, Progmr An- 
alysts, S/w Engrs, Sys Analysts. 
Database Administrators, Net- 
work Administrators to develop, 
create, and modify general com- 
puter appli'ns s/w or specialized 
utility programs. Analyze user 
needs & dviop s/ware solutions. 
Apply with 2 copies of resume to! 
Millennium Information Tech 
666 Plain sboro Road Ste 455 
Plainsboro NJ-08536. 


Programmer Analyst (2 posi- 
tions) needed w/2 yrs exp to 
analyze, design, develop, test 
& document application soft- 
ware using C, C++, COBOL, 
Lotus Notes, Visual Basic, 
Java, Oracle, SQL Server, 
Sybase, MS Access, Dbase 
on Mainframe, Unix & Win- 
dows platform. Create Forms 
& Reports. Mail resumes to 
Compuinfo, 22 Meridian 
Road, Suite #17, Edison, NJ 
08820. Job Location: Edison, 
NJ or in any unanticipated 
locations in USA. 


SAP Consultant needed w/Mas- 
ters or foreign equiv in Bus. Ad- 
min. or Info Tech & 1 yr exp to’ 
analyze, dsgn, configure, impimt, 
test & maintain s/ware applic 
using SAP R/3 for HR/PS mod- 
ules. Dsgn interfaces for SAP 
R/3 wiother applics like People- 
Soft, Workbrian. Perform data 
modeling & data flow definition 
for data migration codes from 
legacy to SAP R/3 systm 
Upgrade SAP systm using SAP 
Enterprise Portal & SAP Net- 
Weaver. Dvip test scripts & run 
testing using 4th generation 
prgmg language ABAP/4. Mail 
resumes to: Tanisha Systems 
Inc., 63 Presidential Dr, Ste #4, 
Quincy, MA 02169. Job loc 
Quincy, MA or in any unanticipat- 
ed locs in USA. 


Systems Analys: for Plainsboro: 
Responsible for complete life 
cycle of project using Java 2, 
HTML, Win200C/XP, MS SQL 
and ABAP4, GIS tools for client- 
server systems for ERP. Will do 
customer-supplier relationship 
management, supply chain 
management, ED! mapping pro- 
tocols, GIS tools, technical 
mathematical tools and data 
manipulation software packages 
such as Matlab and Mathemati- 
ca. Competitive wages, 40 hr. 
week, Master's in Engineering, 
or computers. 6 to 9 months 
experience required. Submit 
resume to Info Manager, 66 
Elsie Dr., Plainsboro, NJ 08536 


App! System Engr need- 
ed at client sites to dsgn, 
dev progs & appis using 
Oracle, MS SQL Srvr, 
VC++, XML, XSL, VB.net, 
C#.net, ASP, ASP.net, MS 
SQL Srvr Rprtg Svs, 
OLAP, Java, Java Swing, 
Serviets, JSP. Send 
resume to: CS Solutions, 
2626 E 82nd St #151, 
Bloomington, MN 55425. 


Sr. Software Engineer need- 
ed to lead in dsgn & dvipmt 
of test plans, work estima- 
tions, work scope & test 
cases on Use Cases, Bus- 
iness Flows &/or Design 
Documentation. Resume to: 
Technology Acceleration 
Partners, Inc. Attn: HR, 3515 
Pilgrim Lane N, Plymouth, 
MN 55441 


Computer Professionals (Som- 
erset) NJ based IT firm, Jr. Lvi 
positions Progmr Analysts, S/w 
Engrs, Sys Analysts, to dvlop, 
create, & modify general comp 
applic'ns s/ware or specialized 
utility programs. Analyze user 
needs & dvlop s/ware solutions. 
Sr. Lvl position, 1T Mgrs, MIS 
Mgrs, ITS Directors to plan, 
direct, or coordinate activities in 
such fields as electronic data 
processing, inforin sys, sys 
analysis, comp progrmng. Apply 
w/2 copies of resume to HRD, 
XL Softek, Inc., 31 Margaret 
Drive, Somerset, NJ 08873. 


Computer Professional Par- 
sippany, NJ Programmer 
Analysts, Software Engin- 
eers, Systems Analysts, 
Database Administrators to 
Develop, create, and modi- 
fy general computer appli- 
cations software or special- 
ized utility programs. An- 
alyze user needs and 
develop software solutions. 
Apply to HRD, Shiva 
Software Group, 1130 Rte 
46 W, Ste 8, Parsippany, NJ 
07054 


ERP Analyst: NYC: Neotecra a 
software consulting co, has 
openings for Expd prof to cus- 
tomize ERP pkgs, implement 
Discrete Oracle Manufacturing 
modules BOM, MRP, Costing, 
Inventory, Capacity require- 
ment planning & Distribution 
modules. Assist in structured) 
approach to systems imple- 
mentations, gap analysis, inte- 
gration, testing with internal/ 
external financial & supply 
chain systems. We offer com- 
pet salaries. For immed consid 
send res to: Neotecra inc., 90 
John St, Sth Fl, NY, NY 10038, 
Attn: HR. 
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message with IT Careers. 


IT Careers Audience Skill Survey 2003/2004 


IIS/MIS/IT 

Windows 2000 

TCP/IP 

Windows 95/98 

PC/s 

Unix NET/Linus 
Networking/Telecom 
Windows NT 

Windows XP 
Internet/Web Dev./E-Com. 
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Your direct line of 
communication to qualified IT 
Professionals with the most in 


demand IT skills 


Contact us: 800-762-2977 
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SENIOR R&D ENGINEER 


Bayer HealthCare LLC in Tarry- 
town, New York seeks a Senior 
R&D Engineer to be responsible 
for researching, designing and 
developing operating software in 
support of the company's re- 
search and development efforts 
for diagnostic instruments. Mast- 
er of Science degree in Comput- 
er Science or Computer Sys: 
tems required plus two years 
experience in position offered or 
as a Software Engineer, Pro- 
grammer Analyst or Consultant 
Eperience with Microsoft Visual 
C++ 6.0, COM, ATL, MFC, STL 
XML, .NET, UML, Win32 API 
Active Directory API, Microsoft 
SQL Server 2000, and WISE 
Installation System software 
development tools. 40 hours. 
week, overtime as required 
8:00 a.m. to 5:00 p.m. Please 
submit your resume via email to 
bayerdiag@trm.brassring.com. 


Computer System Analyst want- 
ed by Bayview Finc'l, L.P. Resp. 
for creation, deployment & maint 
of drive images for desktop & 
laptop machines running Win 
dows 2000 Porf. &/or XP. Must 
have working knwidg of image 
concepts: SysiD, SAM Data- 
base, & SysPrep. Resp. for 
selection & later deploy. of new 
Desktop Mgmt Syst. for the Corp. 
Ghost Image testing & cloning 
process exp. Device driver & 
appl. installt'n & compatibility 
knwidg req. Must have Bach 
Deg. in Computer Science + 5 
yrs of exp., and MCSE (Windows 
2000 or 2003). SMS is a plus. 
Comp. salary offered. Mail 
resume to: Ellen Charleton, 4425 
Ponce de Leon Blvd. 5th Floor. 
Coral Gables, FL 33146. 


Systems Consultant to 
provide web infrastruc- 
ture design. MSCS with 
exp. in secured web 
portal design for intra- 
net/Internet call center 
applications. Work ex- 
tensive with OOPS, C# 
& .Net technologies 


Techorbit Inc 
635 Fritz Drive, #105 
Coppell, TX 75019 


| Ads 
Placed 
Weekly 


Didn't find the 
IT Career 
Opportunity 
you were 
looking for? 
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Check back 
weekly for 
fresh job listings 
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top companies 
looking for skilled 
IT professionals 


like you! 


iticareers 


800-762-2977 








Satya Marg Solutions inc 
Woodbridge, NJ, needs experi- 
enced Programmer Analysts 
and Software Engineers, having 
a Bachelors degree in a quanti- 
tative discipline or equivaient 
with a minimum of two years of 
progressive work experience in 
client server technologies devel. 
oping software applications us- 
ing any of the following tech- 
nologies: C, C++, Java - 
soft.Net technologies, ASP, 
Developer 2000, Visual Basic 
VC++, Mainframes, WebSphere 
WebLogic, Manual/Automated 
testing tools, CORBA, XML 
HTML, SQL Server, Oracle and 
Sybase. Satya Marg Solutions 
Inc. is also looking for qualified 
Network Engineers and 
Database Administrators, having 
a Bachelors degree in a quanti- 
tative discipline or equivalent 
with a minimum of two years of 
progressive work experience. M- 
F, 40 hrs/week. Competitive 
salary and benefits. Apply with 
resume to: HR Department 
Satya Marg Solutions Inc., One 
Woodbridge Center, Suite # 705. 
Woodbridge, NJ 07095. 


Network Support and Test En- 
gineer. Job in Boca Raton. Dsgn 
& devip sftw systs usng sci analy 
& math mdis to prdct outcm & 
consqs of dsgn. Write test pins 
from mktg docs & test suites 
accord. to engng requirmts. Dev 
& exec tests of sftw usng C/C++ 
Consit w/ QA engnrs to eval 
interf betw hdw & sftw, dev 
specs & perfrm requirs & resiv 
cust prbims. Interf w/ develop. 
engnrs to fix bugs. Develop & 
exec load & perf test pins & load 
test stes. Dvip atmd load tsts. 
Dsgn & exec wht box pins & tst 
cases. Dsgn & implem QA assur 
tst tls. Dta valid agnst Oracle db. 
Prep. Id test rpts. Config. Cisco 
rtrs. Config & mntn Catalyst LAN 
swichs & rtrs. Config, mntr & 
mntn equip incl srvrs, ntwk drvs. 
TCP/IP utils & net prntrs. Req. 
B.S. or equiv. bsd on educ & exp 
in comp sci and/or IT + 2 yrs. 
exp. Verif refs. M-F 9-5. Send 
Resumes to Xpoint Technolo- 
gies Inc., 9OINW Sist St 

Ste 105, Boca Raton FL 33431 

Attn: Cindy Wang. 


Software Application Consultant 
Job in Miami. Eval & test sftw 
prgms & sftw develop proces to 
vrfy func accord to user & cnfrm 
to establ gdins thru Ltn Am Mkt. 
Wrt, rvse & vrfy qlty strds & test 
Procds for prgm dsgn & prod 
eval. Rvw pgm inci docs, diag & 
flow cht to ver prim for user & 
cnfrm to gdins. Impim ERP Orcie 
& Gt Pins thru cycl, instin, test & 
impimntn. Rvw log to identify 
prgm errs. Etr instrs to test prgm 
for vidty of rsits, acrcy, reli & 
cnfrm to stnds Ident diffs betw 
estab stnds & user apps & mdify. 
Test to crrct prgm op error. 
Cmptbity tests w/ vndr prgms. 
Intrfce data from Orcle dbs to 
Siebel & Anal OLAP data whsing 
usng ETL, Orcle SQL, Crstl rpt 
& MS Off. Eval prpsd sftw. Dev 
utlty prgm to test, trk & vrfy dfcts 
in prgm. Write prgms to crte & 
mdfy procds. Req. bach or 
equiv. bsd on educ/exp. in 
mgmt. info. systems + 2 yrs exp. 
in job offered. Verif refs. M-F, 9- 
5. Snd resumes to SMX Servic- 
es and Consulting, Inc., 7220 
NW 36 St, Ste# 435, Miami, FL 
33166, Attn: HR. 


Business Analyst needed w/2yrs 
exp to dsgn projects based on 
Three Tier Architecture. Use 
Oracle & d/base server for ap- 
plic. Involve in gathering reqmts. 
for projects & analyze them 
Write stored procedures. Dvip 
interfaces w/business partners 
as business model components 
of the wholesale systm. Sched 
tasks on a daily/weekly basis. 
Involve in coding, dsgn efforts, 
integration & customization of 
applic & d/base. Mail res to 
Optima Technology Partners, 
Inc., 9 Mount Pleasant Tpke, Ste 
103, Denville, NJ 07834. Job 
loc: Denville, NJ or in any unan- 
ticipated locs in the U.S.A 


Systems Analyst (San Diego. 
CA) Must architect applics & 
interfaces between various 
systms for commercial banking 
applics using Oracle, C on Unix: 
Windows based servers. Plan 
direct & coord offshore & onsite 
activities. Reqs BS or equiv in 
Comp. Sci. or related fieid & rel 
evant exp w/the above ir 
technology. Send ’ 
Suresh Bhandarkar, MBT Inter 
national Inc 666 Plainsboro 
Rd., Ste. 1165, Plain 0, NJ 
08536 


Systems Analyst (San Jose, CA) 
Resp for d/base dsgn for applic 
components, schema reviews. 
data definition language scripts. 
fquery optimization & perform- 
ance tuning. Must mode! & dsgn 
complex info systms (OLTP. 
Data Warehousing Applics) on 
Oracle 8i, 9i. Must be proficient 
in Oracle Dsgnr 2000, ERWin. 
PL/SQL, DVLPR 0. Reqs BS 
or equiv in Comp. Sci. or related 
field & relevant exp w/the above. 
Send resumes to Suresh 
Bhandarkar, MBT International 
Inc., 666 Plainsboro Rd., Ste 
1165, Plainsboro, NJ 08536 


Sr Project Leader (Englewood. 
CO) Coord/impimi solutions for 
telecom applics such as order 
handling, activity mgmt & n/work 
mgmt using 3 tiers. Must en- 
hance & maintain middleware 
applic (UNIX based C/C++ serv- 
ers using RPC/DCE) & front end 
(J2EE on Weblogic) w/backend 
mainframe (IBM3090, CICS 
COBOL, IDMS/DB2). Regs BS 
for equiv in Comp. Sci. or related 
field & relevant exp w/the above 
domain/technology. Se resu- 
me to Vivian Fernandes, MBT 
International Inc., 384 Inverness 
Pkwy, Ste 205, Englewood, CO 
80112 


IT Professionals 
and Managers Needed 


Patni Computer Systems, Inc 
an established and expanding IT 
consulting company with head- 
quarters in Cambridge, MA is 
searching for qualified {T Pro- 
fessionals (i.e. Software Engin- 
eers, Programmer/Analysts, Sy- 
stems Analysts); Information 
Systems and Project Managers. 
and account/sales managers for 
its growing team. Technical posi- 
tions require a bachelor's de- 
gree in computer science, engi 
neering or a related field and/or 
relevant industry experience 
For our Inf tion Systems 
and Project Manager positions 
we prefer a MS degree in relat- 
ed fields such as computer sci- 
ence or engineering and rele 
vant industry experience. We 
will c ider app! nts with a 
relevant bachelor’s degree and 
significant industry expe: 

for these positions. 
count/sales manager positions 
involve developing and manag- 
ing business development initia- 
tives, as well as existing ac 
counts for the company. Quali- 
fied applicants wil! have a tech- 
nical and/or business/marketing 
degree (master’s preferred) and 
relevant industry experience. 
Positions may require relocation 
to various client sites throughout 
the United States. Qualified ap- 
plicants submit resumes to HR 
Department, Patni Computer 
Systems Inc., One Broadway 
15th Floor, Cambridge, MA 
02142. (Please specify position 
for which application is being 
submitted on envelope) 


Product Manager at 
Lake Mary, FL: man- 
age s/w engrs to devel- 
op web-based author- 
ing tool for e-learning 
enterprise applications. 
email resume to 
jobs@outstart.com. 


Outstart, Inc. 
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SEEKING 


EU are ed 


Florida Community College at Jacksonville (FCCJ) seeks a dynamic individual 
to lead the project planning, development and implementation of systems/ 


applications portfolios and all associated programming, analysis, coordination 


and related work. 


Systems Analyst 


Florida Community College, one of the nation’s leading technology 


environments in higher education, is the second largest community college 


in Florida and the tenth largest in the nation. This progressive College serves 


two northeast Florida counties through five campuses and four centers, with 


programs ranging from adult education to college credit. 


For a complete description of this and other positions that we 
have available, please visit our Web site at http://Jobs.FCCJ.edu. 


Interested candidates must submit a Florida Community College 4 cS ; 


at Jacksonville online application. 


does not discriminate on the ba’ 
ability in employment or the orov 


college. FCCJ maintains a smoke-free 


Data Domain Specialist. Chica- 
IL. Responsible for acquir- 
updating, and ana’yzing 
curities data on a real time 
electronic trading system. Re- 
search the accuracy of data and 
recommending the appropriate 
solution in cases of suspect 
price on a security. Analyze cash 
dividenc data that cannot be 
arbitrated through an automated 
corporate action system. Create 
and maintain archives of rele- 
vant corporate announcements 
and review daily corporate 
actions. Assist in building inter- 
national and domestic propri- 
etary databases relating to secu- 
rities information gathered 
through research and analysis 
of corporate documentation 
Responsible for developing and 
sustaining relationships with 
investor relations and traders. 
Must have Bachelor's in busi- 
ness, finance, computer science 
or engineering or foreign equiva- 
lent. Must have academic or 
work experience with Bloom- 
berg, IDC, IFS, Reuters or gen- 
eral market providers. Must 
have academic or work experi- 
ence with SQL or PERL. Please 
send a cover letter and resume. 
referencing job order R-0039 to: 
itjobsO039@citadeigroup.com 


Database Administrator w/Bach 
or foreign equiv in Comp. Sci & 
Bus. Admin or Engg or Math & 2 
yrs exp to write d/base creation 
scripts, PL/SQL server side 
stored procedures, functions & 
triggers. Perform SQL tuning, 
Unix scripting, dvip Forms 
Reports & Schemas. Install 
Oracle s/ware & its associated 
tools. Handle d/base security 
admin, storage mgmt, systm 
backups, replication, clustering, 
data archiving, recovery & main- 
tenance. Read/write query plans 
& create the physical layout of 
file systms using storage archi 
tecture concepts (NAS, SAN, 
RAID). Exp prior to the comple- 
tion of Bach deg is acceptable. 
Mail resumes to: Advanced 
Technology Solutions Group. 
Inc. 1762 Central Ave, Albany, 
NY 12205. Job Loc: Albany, NY. 
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s of race. 


Satya Marg Solutions In 
Woodbridge, NJ, needs experi 
enced Senior Software Engin 
eers and Project Leaders having 
a Masters degree in a quantita 
tive discipline or in the alterna 
tive a Bachelors degree in a 
quantitative discipline with a 
minimum of five years of pro 
sive work experi in 
erver technologies devel 
software applications 
using any of the following tech 
nologies: C, C++, Java 
soft.Net technologies ¢ 
Developer 2000, Visual Basic 
VC++, WebSphere, WebLogic 
Manual/Automated testing tools 
Cobol, Mainframes, CORBA 
XML, HTML, Oracle and Sy 
base. Satya Marg Solutions, inc 
is also looking for 
Senior Network Engin 
Cisco, Windows and Se 
tabase Administrators having a 
Masters degree in a quantitative 
discipline or in the alternative a 
Bachelors degree in a quantita 
tive discipline with a minimum of 
five years of progressive work 
experience. M-F, 40 hrs/wee! 
Competitive salary and ben 
Apply with resume to: HR 
partment, Satya Marg Solutions 
Inc., One Woodbridge Center 
Suite # 705, Woodbridge, NJ 
07095. 


Comp: Software Engineer 
(Bachelor's degree with 5 years 
experience) - Job in Iselin, NJ 
Experience in design and devel- 
opment of applications using 
Oracle (Developer 2000, Oracle 
Designer, PL/SQL Scripts) 
SQL*Net, SQL*DBA, SQL- 
“PLUS, ERWIN, Visual Basic 
Crystal Reports, PeopleSoft and 
UNIX. Software Engineer (Mas- 
ter’s with 1 year experience or 
Bachelor's with 6 years experi- 
ence) - Job in Iselin, NJ. Ex-peri 
ence in: ABAP, SAP FICO, SAP 
R/3, SAP R3 FI-CO, SAP BW. 
Oracle Financials, Pt /SQL, SQL 
Server, ERWIN, Oracle De-sign- 
er, Java, Cognus and Business 
Objects; must have experience 
in design and development of 
applications. Relocation within 
USA possible. Send resumes to 
Sundari Natarajan, Software 
Research Group, Inc., 485E 
Route 1 South, #240, Iselin, NJ 
08830. 


FLORIDA 
COMMUNITY 
COLLEGI 


MULTIPLE AD 
FOR EMPLOYEES 


Multiple IT Relate: 

National Placeme 

burgh, PA). Analyze 

develop, test, customize and 
implement corr software 
applications. Cai dates may 
quality for either job listed below 
A) Software Engineers: Bach. 
elors Degree or equivalent in 
Computer Science, or gineer 
ing and five years related expe 
rience or Masters Degree and 
three years experience 

1. Ref#JAV-101: Must have ex 
perience with Java / J2EE 

EJB, JSP, C++, Weblogic 
sphere, HTML, XML, STRUTS 
Oracle and UNIX 

2. Ref#CMF-102: Must have ex 
perience with IBM Mainframe 
COBOL, CICS, JCi, VSAM 
DB2, TSO/MSPF, FILEAID and 
ENDEVOR 

3. Ref#VBA-103: Must have ex 
perience with VB / VB.NET, ASP 
ASP.NET, and C #, COM/COM 
+, Crystal Re UML, PL 
SQL. VB Script, Oracle and SQL 
Server 

8B) Computer Systems Ana- 
lysts: Bachelors Degree or 
Equivalent in either, Business 
Administration, Management 
Accounting, informa Syst 
ems, Engineering or mputer 
Science is required and five 
years related experience or 
Masters Degree and three years 
experience 

1. Ref#SAP-100: Must have 
expenence in customizing, imp 
lementing SAP R/3 Applications 
in at least two (2) of the following 
modules Basis/Security or BW 
or FI/CO or PS or CRM or HR or 
PP or MM or Enterprise Portal or 
SD or ABAP or Netweaver 

2. Ref#PLS-100: Must have ex 
perience in customizing, imple 
menting Peoplesoft Applications 
in at least one (1) of the follow 
ing modules Financials or 
HRMS or SCM or EPM or CRM 
or Procurement or Peoplecode 
or Student Admin 

Must be able to relocate to dif 
ferent client sites as needed. 9. 
5, 40 hrs/wk. Please use refer 
ence Ref# when applying for job 
you are interested in and Send 
resumes to Attn: HR, WOW 
Global Corporation, LLC, 5168 
Campbelis Run Road, Pitts 
burgh, PA 15205 or email resu- 
me to hr@wowcorp.com 
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Continued from page 1 


ERP 


ready cut supply costs by $1.5 
million and annual IT support 
and paper costs by $1 million 
apiece. CHW officials are pro- 
jecting a 144% return on invest- 
ment over the next eight years, 
or $94 million in savings. 

Almost 80% of CHW facili- 
ties in California, Arizona and 
Nevada are now running the 
new applications. 

Benefits include the con- 
solidation of multiple systems, 
such as financial applications 
from six vendors and materi- 
als management software 
from four, said Rick Canning, 
CHW’s vice president of ad- 
ministrative systems. 

In the previous setup, even 
though 80% of the hospitals 





were using human resources 
and payroll software from a 
single vendor — the former 
Infinium Software (since | 
acquired by SSA Global | 
Technologies Inc.) — those 
applications were installed on 
about 20 different databases. 
The disparate systems caused 
CHW to struggle whenever 

it needed to get data to make 
systemwide decisions or to 
start an initiative, Canning 
said. “We had to get each in- 
dividual site to translate their 
data and try to make heads or 
tails of what was going on,” he 
explained. 


10-Year Journey 

The Lawson implementation 
has overcome several obstacles 
so far, Canning said, including 
the effects of the failed SAP 
deployment, user resistance 








at some sites and the need to 


overhaul data standards to sup- 


port the new software. 
The ERP journey began in 
1996, when CHW began work- 


| ing with SAP ona project 


to install ERP software ina 


| planned central IT facility in 
Phoenix. 


That plan was foiled by a 


| failure to entice IT workers to 


move from California to Phoe- 
nix and problems with the SAP 
software. Users found SAP 
supply chain and financial ap- 


| plications installed at seven 


hospitals by 2000 “extremely 
complex” and not intuitive, 


| Canning said. 


In 2001, a new CEO oversaw 
a corporate reorganization 
to stem operational losses in 
1999 and 2000, and that led to 
a decision to outsource CHW’s 
IT operations to Perot Systems 


SURO RARRR IDRIS CCRT RRR ORR, 
CHW Takes Creative Approach to User Resistance 


TO HELP GARNER enthusiasm 
for its effort to implement new 
ERP software in its 40 health care 
facilities, Catholic Healthcare West 
Officials are hosting “go live” cel- 
ebrations for users. 

The celebrations follow CHW’s 
strategy of customizing its change 
management effort by tailoring the 
galas to the culture of the individual 
facility. For example, the company 
held a conservative celebration in 
an upscale Phoenix hotel for one 
group but took another unit to a 
lively Las Vegas show. 

The deep dive into each hospi- 
tal's “personality” has been key to 
the success of the $54 million proj- 
ect to install Lawson Software ERP 
applications in all CHW facilities by 
the end of next year, said Carol Tyler, 
director of change management 
communication and education at 
the health care provider. 

Tyler, whose position was cre- 
ated in 2003 to help shepherd the 
project through inevitable “people” 
issues, has found the most user 
resistance at the seven CHW 
hospitals where an earlier SAP ERP 
installation had failed, she said. The 


SAP effort was halted after five : 
years, in 2001, in favor ofamoveto : 
Lawson software. 

“They had a very, very strong 
distaste for a new IT project. They 
had been through [the SAP] project, 
and they didn’t care for it,” Tyler said. 

“We found ourselves facing demons 
from the past.” 

To combat the lingering problems, 
Tyler held meetings with top man- 
agement at each of those hospitals 
and worked with key users in their 
finance, supply chain and human 
resources operations to understand 
their concerns, she said. 

Then she tailored the commu- 
nications plan to explain how the 
Lawson software could address 
their worries. 

In addition, Tyler and the CHW 
ERP team have been attending 
monthly manager meetings at all 40 
hospitals during the conversion to 
monitor progress. 

She also created “change cham- 
pion” positions at each hospital to 
promote the software, and she visits 
often with users who might have 
encountered problems. “There were 
different [job] levels in the facilities, 
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[and] those levels weren't neces- 
sarily being heard as to what their 
requirements were,” she said. 

When Tyler learned that users 
at some hospitals preferred hear- 
ing about the project from on-site 
management rather than from head- 
quarters officials, she enlisted local 
managers to take the lead during 
meetings. 

In addition, CHW focused on de- 
signing a consistent “Lawson brand” 
in all of its communications about 
the project to ensure that users 
knew it was a new IT project. 

“One of the scary things about 
change is it keeps changing. One 
way for me to anchor some support 
in Lawsen is to provide familiarity,” 
Tyler said. 

Joshua Greenbaum, an analyst 
at Enterprise Applications Consuit- 
ing, notes that in large ERP proj- 
ects, change management is often 
more important than the software 
itself. 

“Without a well-mannered 
change management process, 
everything else will roll up on you,” 
he said. 

- HEATHER HAVENSTEIN 


CANADIAN POSTMASTER: 


POSTMASTER: 





Corp. The operations are still 
outsourced to Perot. 
The company had decided 


| to abandon the SAP effort in 


2001 after an internal study 
determined that the German 


| vendor’s applications were 


geared more toward a manu- 


| facturing environment than 
| aservices-based health care 


business, Canning said. 
An SAP spokeswoman 
contended that the firm has 
a “strong footprint in health 
care.” She blamed the move on 
executive changes at CHW. 
In early 2002, CHW se- | 


lected Lawson, which Canning 


said generates 40% of its rev- 


enue from health care organi- 
zations. 

CHW took six months to 
find the right staff to support 
the applications and then be- 
gan the implementation. 

It also formed a project 
management office and four 
committees to hammer out the | 
data standards for the Lawson 
human resources, finance, sup- 
ply chain and payroll systems. 
The committees have since 
added key users from various 
hospitals who have helped sort | 
out several sticky issues, like 
standardizing data elements in 


a chart of accounts and reduc- 


ing standard pay codes from 
700-plus categories to 250, 
Canning said. 

The new software has 
heiped CHW reduce the time 
it takes to close its books from 
14 days at some hospitals to 
one day, he said. In addition, a 
recent project to consolidate 
the management of employee 
retirement plans from mul- 
tiple vendors to one took four 
months; the same task would 
have taken a year using the 
older systems, Canning said. 

Linda Pike, the Lawson ma- 
terials management system ad- 
ministrator at St. Rose Domin- 
ican Hospital in Henderson, 
Nev., said the new software 
lets her department generate 
reports to monitor purchasing 
compliance under established 
contracts. Previously, her unit 





had to rely on administrators 
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Catholic Healthcare 
West ERP Project 


1996 Catholic Healthcare 
West working 
with on plan to 
standardize on the 
vendor's ERP software. 


1999- Installs SAP finance 
2000 and supply chain soft- 
ware at seven CHW 


a 
2001 Hires a new CEO and 
starts 


using Lawson software. 
2004- First-chase hospitals go 
2005 live with Lawson. 


2005- Second-phase hospitals 
2006 golive. 


Early 31 out of 40 hospitals 
2006 will be live on Lawson. 


End of Remaining hospitals will 
2006 be liveon Lawson. 


| from a regional office in Phoe- 
| nix to run the reports. 


“We can retrieve that data 


| from our system relatively 


easily using Lawson canned 


|} reports and tools we use with 


Excel,” Pike said. 
Joshua Greenbaum, an ana- 


| lyst at Enterprise Applications 


Consulting in Berkeley, Calif., 
said that while SAP’s ERP 
applications are usually well 
suited to hospital environ- 


| ments, good implementations 


also require good partners. 
Lawson works well with 
health care users, which can 
be atypical businesses, he said. 
“The main reason ERP 
implementations fail in the 


| modern era is not because the 


software is bad,” Greenbaum 
said, “but because the party 
that is implementing it didn’t 
understand how to do it.” » 
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FRANK HAYES # FRANKLY SPEAKING 


aughty and Nice 


ANTA FROWNED thoughtfully at his desk piled high with 
letters. “King Kong,” he said at last. “Suddenly, King Kong is 
big. Well, he was always big, but now everyone wants a giant 
gorilla, and we’ve got nada. Lloyd!” he called out. “Is there 
anything we can do about this last-minute Kong problem?” 
“Already on it, chief,” said the head elf as he walked by, clipboard in 
hand. “We’ve got five days before liftoff, and the design team is figur- 
ing out something right now. Besides, you don’t have time to worry 
about that — you still haven’t decided what to give all your 8,000- 


pound gorillas in the IT biz.” 

“You mean Bill Gates, right?” said Santa. “He’s 
not only the world’s richest nerd, he was also 
knighted this year.” 

“And now all he can talk about is Web Sir — 
uh, services,” said the elf. “Let’s give him and 
Steve Ballmer Xbox 360s, and they can experi- 
ence that legendary Microsoft quality firsthand.” 

“Still failing your QC checks, eh?” said Santa. 

“Maybe we should give Steve Jobs an iPod Nano 
too, and see how long the screen remains un- 
scratched.” 

“No wonder none of these guys can get their 
technologies into Nicholas Negroponte’s $100 
hand-cranked laptop,” the elf said. “It’s supposed 


to be durable. Anyhow, what about Larry Ellison, 


the man who owns everything?” 

“How about a Martha Stewart sewing kit?” 
said Santa. “He’ll have to stitch together Oracle, 
PeopleSoft, J.D. Edwards and Siebel. And maybe 
Martha’s name will remind him not to do any 
more insider trading.” 

“Yeah, like that $122 million settlement 
wouldn't do that,” smirked the elf. “Carly Fiori- 
na’s off the list now that she’s gone from Hewlett- 
Packard, right?” 

“She'll be back,” Santa said, “even 
if it’s just to testify in AMD’s lawsuit 
that claims Intel strong-armed HP 
into not using AMD chips.” 

“Send her a DVD of Bill Gates’ 

greatest courtroom hits,” said the elf. 
“And speaking of former CEOs, re- 
member Steve Case, the ex-America 
Online honcho? Lately he’s been 
saying Time Warner should sell off 
AOL. Give him a diary — maybe 
that’ll help him remember the past, 
like the fact that the whole messy 
AOL Time Warner merger was his 
idea in the first place.” 

“That sounds fine,” Santa said. 





“Now, what about all the people at the other end 
of the IT pipe? I understand those poor Black- 
Berry users might have their service cut off.” 

“Ooh, replacing that system could get pricey,” 
said the elf. “Let’s try paper cups and string as a 
stopgap, and work from there. And for the folks 
who got infected with rootkits by Sony CDs, 
what about gift certificates for the new, legalized 
Napster? Sony makes the worms and ‘Trojans on 
peer-to-peer networks sound like they’re almost 
worth the risk.” 

“Hmm,” said Santa, peering at the elf’s clip- 
board. “I think Google’s stockholders got their 
presents early. They doubled their money this 
year when the stock price went from $200 to 
$400. But what about the analysts who said a 
year ago that it couldn’t go any higher?” 

“A slice of upside-down cake, with a side of 
humble pie,” suggested the elf. “And a little more 
humbie pie for the Wikipedia folks — they got 
a black eye after some clown from Nashville 
changed a Wikipedia biography so it claimed that 
a local newspaper bigwig was connected with the 
Kennedy assassinations. Big embarrassment for 
something that’s trying to be a real encyclopedia.” 

“The saddest part is, he did it as 
a joke,” sighed Santa. “He thought 
Wikipedia was a gag site, like The 
Onion.” 

Suddenly the head of production 
came bounding across the work- 
shop floor. “Kong problem solved, 
chief!” he crowed. “We’ve got two 
production lines sticking fake fur on 
old Schwarzenegger action figures. 
Beautiful work, too. Looks just like 
that big ape.” 

“Ho, ho, ho!” laughed Santa, his 
eyes twinkling. “Boys, I guess it’s 
true. Some years, this business will 
make a monkey of anyone.” » 


| 





Just a Little Bit Confused 

Users at this company don't trust the sysadmins with 
backup tapes. “They order their own and, like Oliver 
Twist, we have to go cap in hand and ask for some 
more tapes,” says a pilot fish there. “A new tape 
drive was added to a server, and we did our Oliver 
and asked for 20 new tapes to build the new backup 
tape cycle. When we came to use them, we discov- 
ered we had been supplied with 20 cleaning tapes 

- which meant one very clean drive, but no backup. 
The users are now ordering data tapes.” 


Whoops! 
U.S. IT vendor 
is planning a 
new Australian 
HQ in subtropi- 
cal Sydney, where win- 
ter temperatures might 
get as low as 5 degrees. 
“That's Celsius - about 
39 degrees Fahrenheit,” 
says 2 pilot fish there. 
“Over nine months, the 
plans were extensively 
debated and committee- 
fied until everyone was 
totally satished from 
practical, aesthetic, 
budgetary and environ- 
mental viewpoints. The 
plans were then submit- 
ted to the American 
head office - which 
summarily rejected 
them overnight.” Why? 
“They said the roof 
wasn't strong enough 
to withstand the weight 
of snow in winter.” 


What Luck! 

This on-call If support 
team passes around a 
cell phone, and there’s 
a list at the night-shift 
desk that tracks who 
has it, reports a pilot 
fish on the scene. 

But it’s not a perfect 
system, as evidenced 
by one late-night call: 
“On-call help desk. This 
is Wilma.” “Wilma? | 
thought Fred was on 


TANK. 


call.” “No, it’s 
me.” “But the 
call sheet says 
it's Roman. Why 
isn’t Roman... . 
Oh, never mind. It's a 
good thing you two have 
the same number!” 


That's Not the 
Way It Works 

Help desk pilot fish 
receives an e-mail from 
a user who says that her 
laptop's hard drive is 
full. Reports fish, “She 
then asked, very politely, 
when would be the best 
time to drop it off for a 
cleaning, as she was 
leaving for a business 
trip the next week.” 


Not a Creature 
Was Stirring . . . 
Pilot fish gets a call 
from a nearly hysteri- 
cal user: “Help! | think 
| killed my computer!” 
When fish arrives at us- 
er’s desk, user explains, 
“| turned it on, but noth- 
ing happened. It just 
sat there!” Fish quickly 
determines that the PC 
is fine - it’s just in sleep 
mode, and pushing the 
power button brings it 
back to life. How, exact- 
ly, did you “turn it on”? 
fish asks. “Just like | 
always de,” replies user. 
“1 shook the mouse.” 


SHARKY WON'T BE STIRRING anything but eggnog 

for a couple of weeks, but you can still send me your 
true tale of IT life at sharky@computerworld.com. You'll 
get a stylish Shark shirt if | use it next year. And you can still 
check out the daily feed, comment at Sharky's blog, browse 
the Sharkives and sign up for Shark Tank home delivery at 
computerworld.com/sharky. 
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IT-sawvy business leaders 


* ADVANCING IT governance 
and risk/reward balance 


See solutions from companies including 


APC <bme 


@supportsoft SYBASE, 


AVAYA INTERSYSTEMS Peicewaiemnouse(Gorens @  Procunenerwonms OSSAS & S*RV'V/S 
symantec a VeriSign 


Special Visionary Addresses from: 
WARREN BENNIS, PH.D. 


University Professor, Distinguished Professor of B 
F™ Administration and Founding Chairman, The Leaders 
Univeristy of Southern California 


[ RICHARD CLARKE 


: Former adviser on security to four presidents, former National 

~ Security Council cyberterrorism chief, author of the book 
Against Ali Enemies: Inside America’s War on Terror and 
The Scorpion's Gate 


ya RANDY MOTT 
Executive Vice President and ClO, Hewlett-Packard Company, 
former CIO, Dell, former ClO, Wal-Mart Stores 


Featured speakers inciude: 
RIZWAN AHMED 


C10, Office of Group Benefits & Department of Natural Resource: 


JOHN FISHER 


Senior Vice President and CIO, SmithBucklin Cort 


WENDELL FOX 


Senior Vice President, North Americar 
Marriott International, Inc 


TONY FULLER 

Vice President of IT/CIO, Rent-A-Cent 

DON GIBSON 

Managing Director, IT, Fedex Service 

FARZAD GOLSHANI 

Vice President of IT Infrastructure, Trar 

SCOTT GRIFFIN 

Vice President and CIO, Boeing Information Technolo 
MITCHELL HANSEN 

Vice President, Enterprise Systems & Services, Quest Diagnost 
MIKE HUGOS 

CIO, Network Services Company 

GREG MEFFERT 


Chief Technology Officer/CIO, City of New Orleans 


DIANAH NEFF 


CIO, City of Philadelphia 


FUJITSU 


FUJITSU 


For sponsorship opportunities, call Leo Leger at 508-820-8212 or John Amato at 508-820-8279 


To register now or for more information, visit www.premier100.com 
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ONLY FROM CINGULAR: THE BLACKBERRY 8&8700c 


take care of business and 
look good doing it. 


A superior voice and data experience in a 
sleeker, more stylish form. 


¢ Works on Cingular's EDGE, America’s 
largest high-speed wireless data network 


¢ Global coverage with GSM quad-band 
connectivity 


e Hands-free speakerphone 
¢ Corporate and personal email access 


e Bluetooth® enabled 


“The new 8700c model...is the best BlackBerry 
yet. It is lighter and smaller than prior full-size 
models and has a dazzling color screen.” 


Milian BlackBerry 8700c 
The Wall Street Journal, 


November 10, 2005 — BlackBerry. 
©2005 Dow Jones and Company, Inc 


Call 1-866-4CWS-B2B Click www.cingular.com/blackberry8700c Visit your nearest Cingular store 


* cingular , 
raising the Dar vest 


Coverage not available in all areas. Limited-time offer. Other conditions and restrictions apply. See contract and rate plan brochure for details. Up to $36 activation fee applies. Phone price and availability may vary by market. Early Termination Fee: 

None if cancelled in first 30 days; thereafter, in FL, GA, SC, NC, KY, TN, MS, LA, AL, NY, and applicable parts of IN and NJ, $240 prorated over term; elsewhere, $150 flat rate. Some agents impose additional fees. Sales tax calculated based on price of oT 
unactivated phone. Additional hardware or software may be required. The BlackBerry and RIM families of related marks, images, and symbols are the exclusive properties of and trademarks or registered trademarks of Research In Motion Limited- B.@ 
used by permission. RIM and Research in Motion are registered in the U.S. Patent and Trademark Office and may be pending or registered in other countries. ©2005 Cingular Wireless. All rights reserved. = 
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